← Database

CVE-2026-2817

MEDIUM CVSS: 4.4 Published: 2026-02-19 Modified: 2026-06-17

Description

Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.

Affected Platforms

Unknown

Weakness Type

CWE-378, CWE-379, CWE-538

References