Executive brief
Apache Ignite communicates to an external PHP server where sensitive information is sent
Affected products
- Maven org.apache.ignite:ignite-core
Junglewise Threat Intelligence
CVE-2017-7686: Apache Ignite communicates to an external PHP server where sensitive information is sent
CVE-2017-7686 · Severity: low · CVSS 3 · Published 2018-10-16
Technologies: org.apache.ignite:ignite-core (Maven). Vendors: Maven.
Related threats
- Apache Ignite path traversal in REST API
- Apache Ignite: Possible RCE when deserializing incoming messages by the server node
- File system access via H2 in Apache Ignite
- Code execution via deserialization in org.apache.ignite:ignite-core
- Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization