Lucene search
Veracode Vulnerability DatabaseVERACODE:4490HistoryJun 28, 2017 - 3:07 a.m.
Information Disclosure
2017-06-2803:07:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
30.5%
Apache Ignite is vulnerable to information disclosure. The library contains an update notifier component to notify users about new project releases. This component sends sensitive information to an external PHP server (http://ignite.run) that a malicious user can observe to obtain sensitive data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ignite-core | eq | 1.0.0-RC1 | |
| ignite-core | le | 2.0.0 | |
| ignite-spring | le | 2.0.0 |
References
Related
osv
osv
Apache Ignite communicates to an external PHP server where sensitive information is sent
2018-10-16 20:53:20
CVE-2017-7686
2017-06-28 13:29:00
cvelist
cvelist
CVE-2017-7686
2017-06-28 13:00:00
github
github
nvd
nvd
CVE-2017-7686
2017-06-28 13:29:00
cve
cve
CVE-2017-7686
2017-06-28 13:29:00
prion
prion
Information disclosure
2017-06-28 13:29:00