CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 5.5
CWE Name:  Information Exposure
Summary: when an apache geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a geode cluster using the gfsh tool with http, the user is able to obtain status information and control cluster members even without cluster:manage privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2018-01-10
Last Modified Date: 2018-02-01