Veracode Vulnerability DatabaseVERACODE:25587Arbitrary File Access
0.036 Low
EPSS
Percentile
91.7%
ignite-indexing is vulnerable to arbitrary file access. The vulnerability exists as the access to the filesystem with read and write ability is possible through embedded H2 SQL functions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ignite-indexing | le | 2.8.0 |
References
www.openwall.com/lists/oss-security/2020/06/03/2
github.com/apache/ignite/commit/02b0439639a9dab264cdb3ed4081c231e0079c13
lists.apache.org/thread.html/r119024ef71c8d39f952df0950a275d09714715179aff544aea0129a3@%3Cuser.ignite.apache.org%3E
lists.apache.org/thread.html/r1933faf8a26c431f38a5f8dbbfab80254454e54e33a79be474b67dc4%40%3Cdev.ignite.apache.org%3E
lists.apache.org/thread.html/rd43ae18588fd7bdb375be63bc95a651aab319ced6306759e1237ce67@%3Cdev.ignite.apache.org%3E
lists.apache.org/thread.html/rdf37011b92a31a67c299ff45655e2638f194fc814e5c6e2fde352884@%3Cdev.ignite.apache.org%3E
lists.apache.org/thread.html/rdf37011b92a31a67c299ff45655e2638f194fc814e5c6e2fde352884@%3Cuser.ignite.apache.org%3E
lists.apache.org/thread.html/re7b43cf8333ee30b6589e465f72a6ed4a082222612d1a0fdd30beb94@%3Cdev.ignite.apache.org%3E
lists.apache.org/thread.html/re7b43cf8333ee30b6589e465f72a6ed4a082222612d1a0fdd30beb94@%3Cuser.ignite.apache.org%3E
lists.apache.org/thread.html/rf032a13a4711f88c0a2c0734eecbee1026cc1b6cde27d16a653f8755@%3Cdev.ignite.apache.org%3E
seclists.org/oss-sec/2020/q2/160
www.oracle.com/security-alerts/cpujan2022.html
Related
