CVE-2017-9794: When a cluster is operating in secure mode, a user with read privileges for specific data regions can use t...

Security readout for executives and security teams

This flaw could expose data between authorized Apache Geode users. In secure-mode clusters, a user allowed to read certain regions could run gfsh queries and receive results from another user's concurrent gfsh query, revealing data outside their authorization. Exposure is most likely in organizations running affected Apache Geode clusters in secure mode where multiple users use gfsh queries and data-region permissions are relied on for separation. Treat this as a targeted confidentiality risk, not an internet-wide emergency. Prioritize remediation where Geode stores sensitive or regulated data and multiple users can run gfsh queries. Mitigation focus: Upgrade affected Apache Geode deployments to 1.2.1 or later.; Review Apache Geode vendor guidance for any version-specific remediation notes.; Limit gfsh query access to trusted administrative users until upgraded..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.