CVE-2017-9796

Vulnerability

Apache Geode clusters running in secure mode before version 1.3.0 are vulnerable to an OQL injection-like flaw. A user with read access to certain regions can craft OQL queries that use a region name as a bind parameter, bypassing authorization checks and allowing read access to objects in unauthorized regions [1].

Exploitation

The attacker must have authenticated access to a Geode cluster operating in secure mode and possess read permissions on at least one region. By executing OQL queries that include a region name as a bind parameter, the attacker can enumerate and read data from regions they are not authorized to access [2].

Impact

Successful exploitation allows an authenticated attacker to read data from unauthorized regions, violating data confidentiality. The attacker does not gain write access or elevated privileges beyond the scope of read operations on regions they were not intended to access.

Mitigation

The vulnerability is fixed in Apache Geode version 1.3.0 [2]. Users should upgrade to 1.3.0 or later. No workarounds are documented in the references.