Medium severity6.5NVD Advisory· Published Oct 3, 2017· Updated Jun 17, 2026
CVE-2017-9797
CVE-2017-9797
Description
When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of service attack on the cluster.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.geode:geode-coreMaven | >= 1.0.0, < 1.2.1 | 1.2.1 |
Affected products
3- Apache Software Foundation/Apache Geodev5Range: 1.0.0
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-vh98-fqfc-4hj3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-9797ghsaADVISORY
- mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-Hrbb7JS8Nygrh7geyFvW4bMZ3AdCmPOzMfvbniipz0bA@mail.gmail.com%3eghsaWEB
- cwiki.apache.org/confluence/display/GEODE/Release+NotesghsaWEB
- issues.apache.org/jira/browse/GEODE-3249ghsaWEB
- mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-Hrbb7JS8Nygrh7geyFvW4bMZ3AdCmPOzMfvbniipz0bA%40mail.gmail.com%3envd
News mentions
0No linked articles in our index yet.