« Volver al listado

CVE-2026-2817

Estado: AplazadaMedia (4.8)—

Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Vmware — Data GeodeAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-2817",
  "cveTags": [
    {
      "tags": [
        "unsupported-when-assigned"
      ],
      "sourceIdentifier": "36c7be3b-2937-45df-85ea-ca7133ea542c"
    }
  ],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-2817",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-20T20:31:34.178282Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 1.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 4.8,
          "Automatable": "NOT_DEFINED",
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "LOW",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "36c7be3b-2937-45df-85ea-ca7133ea542c",
      "affectedData": [
        {
          "repo": "https://github.com/spring-attic/spring-data-geode",
          "vendor": "VMware",
          "product": "Spring Data Geode",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.0.RELEASE",
              "versionType": "maven",
              "lessThanOrEqual": "2.7.18"
            }
          ],
          "packageName": "org.springframework.data:spring-data-geode",
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://github.com/spring-attic/spring-data-gemfire",
          "vendor": "VMware",
          "product": "Spring Data Gemfire",
          "versions": [
            {
              "status": "affected",
              "version": "1.7.0.RELEASE",
              "versionType": "maven",
              "lessThanOrEqual": "2.2.13.RELEASE"
            }
          ],
          "packageName": "org.springframework.data:spring-data-gemfire",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-02-19T18:25:00.983",
  "references": [
    {
      "url": "https://www.herodevs.com/vulnerability-directory/cve-2026-2817",
      "source": "36c7be3b-2937-45df-85ea-ca7133ea542c"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "36c7be3b-2937-45df-85ea-ca7133ea542c",
      "description": [
        {
          "lang": "en",
          "value": "CWE-378"
        },
        {
          "lang": "en",
          "value": "CWE-379"
        },
        {
          "lang": "en",
          "value": "CWE-538"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data."
    },
    {
      "lang": "es",
      "value": "Uso de directorio inseguro en la importación de instantáneas de Spring Data Geode extrae archivos en directorios predecibles y permisivos bajo la ubicación temporal del sistema. En hosts compartidos, un usuario local con privilegios básicos puede acceder al contenido de la instantánea extraída de otro usuario, lo que lleva a una exposición no intencionada de datos de caché."
    }
  ],
  "lastModified": "2026-06-17T10:31:49.570",
  "sourceIdentifier": "36c7be3b-2937-45df-85ea-ca7133ea542c"
}