{"vulnerability": "CVE-2017-1569", "sightings": [{"uuid": "33e1ff49-409b-4274-81f9-0e8490229036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15692", "type": "seen", "source": "https://t.me/arpsyndicate/2584", "content": "#ExploitObserverAlert\n\nCVE-2017-15692\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2017-15692. In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.\n\nFIRST-EPSS: 0.014260000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-06T23:02:32.000000Z"}, {"uuid": "0fc9a87b-d198-4a33-8128-677a09a3e0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15693", "type": "seen", "source": "https://t.me/arpsyndicate/2615", "content": "#ExploitObserverAlert\n\nCVE-2017-15693\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2017-15693. In Apache Geode before v1.4.0, the Geode server stores application objects in serialized form. Certain cluster operations and API invocations cause these objects to be deserialized. A user with DATA:WRITE access to the cluster may be able to cause remote code execution if certain classes are present on the classpath.\n\nFIRST-EPSS: 0.010930000\nNVD-IS: 5.9\nNVD-ES: 1.6", "creation_timestamp": "2024-01-07T06:12:09.000000Z"}, {"uuid": "55891ba9-58e2-47a4-a904-9e6ed6471629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15694", "type": "seen", "source": "https://t.me/cibsecurity/5080", "content": "ATENTION\u203c New - CVE-2017-15694\n\nWhen an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-21T20:29:39.000000Z"}]}