CVE-2017-9797: Infoleak
When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of service attack on the cluster.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9797?
The severity of CVE-2017-9797 is considered high due to potential information leakage and denial of service risks.
How do I fix CVE-2017-9797?
To fix CVE-2017-9797, upgrade to Apache Geode version 1.2.1 or later as it includes a patch for this vulnerability.
Who is affected by CVE-2017-9797?
CVE-2017-9797 affects users of Apache Geode versions prior to 1.2.1 that are operating in secure mode.
What impact does CVE-2017-9797 have on my system?
CVE-2017-9797 can allow unauthenticated clients to leak metadata information and potentially perform denial of service attacks.
Can I exploit CVE-2017-9797 remotely?
Yes, CVE-2017-9797 can be exploited remotely since it allows unauthenticated clients to access metadata messages.