{"id":"CVE-2017-9797","details":"When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of service attack on the cluster.","aliases":["GHSA-vh98-fqfc-4hj3"],"modified":"2026-07-08T14:13:11.768417Z","published":"2017-10-03T01:29:03.357Z","references":[{"type":"WEB","url":"http://mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-Hrbb7JS8Nygrh7geyFvW4bMZ3AdCmPOzMfvbniipz0bA%40mail.gmail.com%3e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/geode","events":[{"introduced":"0"},{"last_affected":"964f2749065ce9c6898fd27983b43f1bd9fc77d0"}],"database_specific":{"cpe":"cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.2.0"}],"source":"CPE_RANGE"}}],"versions":["rel/v1.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9797.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H"}]}