CVE-2017-15696

CVE-2017-15696 describes an improper authorization vulnerability in Apache Geode clusters prior to version 1.4.0 when operating in secure mode. An unprivileged user with access to the Geode locator can exploit this to extract sensitive configuration data and previously deployed application code. With a CVSS score of 7.5 (HIGH), this network-exploitable vulnerability requires no user interaction and has a high impact on confidentiality. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.