GHSA-8qfc-cvjp-mgpq

ghsaUSosv

Moderate severity vulnerability that affects org.apache.ignite:ignite-core

view advisory published 2018-10-16Licence: CC-BY-4.0

Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2016-6805USmedium5.9—
Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan