CVE-2026-103371
published 2026-10-07CVE-2026-103371: Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: from 2.0.0 before 2.0.3. Users are…
PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.29%
19.9th percentile
Insertion of Sensitive Information into Log File in Apache Geode Web Management.
This issue affects Apache Geode: from 2.0.0 before 2.0.3.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache_software_foundation | apache_geode | >= 2.0.0 < 2.0.3 | 2.0.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache Geode Management REST API log file
vuldb·2026-10-07
CVE-2026-103371 [LOW] Apache Geode Management REST API log file
A vulnerability, which was classified as problematic, has been found in Apache Geode. Affected by this vulnerability is an unknown functionality of the component Management REST API. This manipulation causes sensitive information in log files.
The identification of this vulnerability is CVE-2026-103371. It is possible to initiate the attack remotely. There is no exploit available.
GHSA
Insertion of Sensitive Information into Log File in Apache Geode Web Management.
ghsa_unreviewed·2026-10-07
CVE-2026-103371 [HIGH] CWE-532 Insertion of Sensitive Information into Log File in Apache Geode Web Management.
Insertion of Sensitive Information into Log File in Apache Geode Web Management.
This issue affects Apache Geode: from 2.0.0 before 2.0.3.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-07
Published