CVE-2017-9795

CVE-2017-9795 describes a critical vulnerability in Apache Geode clusters prior to version 1.3.0, allowing authenticated users with read access to specific regions to bypass security controls. An attacker can execute OQL queries to gain unauthorized read/write access to other regions and potentially achieve remote code execution by invoking arbitrary methods. This vulnerability carries a CVSS v3.0 score of 7.5 (High), indicating a network-based attack with high impact on confidentiality, integrity, and availability, albeit with high attack complexity and requiring low privileges. While the vulnerability is severe, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.