CVE-2017-12622

CVE-2017-12622 describes an authorization bypass vulnerability in Apache Geode clusters prior to version 1.3.0. An authenticated user, even without CLUSTER:MANAGE privileges, can leverage the gfsh tool via HTTP to gain unauthorized access to status information and control cluster members. This vulnerability has a CVSS v3.0 score of 7.1 (High), indicating a low attack complexity and requiring only low privileges for a network-based attack, potentially leading to high confidentiality impact and low integrity impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.