Apache Ignite communicates to an external PHP server where sensitive information is sent

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-7686 · ADVISORY
• GitHub Advisory GHSA-8p83-68cw-943f · ADVISORY
• apache-ignite-developers.2346864.n4.nabble.com/CVE-2017-7686-Apache-Ignite-Information-Disclosure-td19168.html · WEB
• securityfocus.com/bid/99292 · Third Party Advisory

org.apache.ignite:ignite-core のその他の脆弱性

• CVE-2025-48977中 6.5Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log…
• CVE-2024-52577緊急 9.0In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints. The vu…
• CVE-2020-1963緊急 9.1Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to acces…
• CVE-2018-8018緊急 9.8In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/…
• CVE-2018-1295緊急 9.8In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, whic…