CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2017-5649
Severity
HIGH
CVSS
7.5
EPSS
2.78%
Apache
Original NVD Description
Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the cluster.
Related CVEs
Other vulnerabilities affecting the same vendor(s)