CVE-2017-15692
Last modified
CVE-2017-15692 is a vulnerability of currently unknown severity. In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.. EPSS estimates a 5.05% chance of exploitation in the next 30 days.
Description
In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Geode | < 1.4.0 |
References
- http://www.securityfocus.com/bid/103205Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/103205Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-15692?
How severe is CVE-2017-15692?
How do I fix CVE-2017-15692?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-15684Crafter CMS Crafter Studio 3.0.1 has a directory traversal v…7.5
- CVE-2017-15685Crafter CMS Crafter Studio 3.0.1 is affected by: XML Externa…8.6
- CVE-2017-15686Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site …6.1
- CVE-2017-15687DOM Based Cross Site Scripting (XSS) exists in Logitech Medi…
- CVE-2017-1569IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified v…
- CVE-2017-15691In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prio…
- CVE-2017-15693In Apache Geode before v1.4.0, the Geode server stores appli…
- CVE-2017-15694When an Apache Geode server versions 1.0.0 to 1.8.0 is opera…
- CVE-2017-15695When an Apache Geode server versions 1.0.0 to 1.4.0 is confi…
- CVE-2017-15696When an Apache Geode cluster before v1.4.0 is operating in s…
- CVE-2017-15697A malicious X-ProxyContextPath or X-Forwarded-Context header…
- CVE-2017-15698When parsing the AIA-Extension field of a client certificate…
Are you affected by CVE-2017-15692?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST