Vulnerabilities > CVE-2017-15692 - Deserialization of Untrusted Data vulnerability in Apache Geode
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 6 |