4.4
Moyenne
CVE-2026-2817 Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive…
Description
Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spring Data Geode 2.0 | 2.0.0.RELEASE → 2.7.18 | Pas de correctif indiqué |
| Spring Data Gemfire 1.7 | 1.7.0.RELEASE → 2.2.13.RELEASE | Pas de correctif indiqué |