Executive brief
File system access via H2 in Apache Ignite
Affected products
- Maven org.apache.ignite:ignite-core
Junglewise Threat Intelligence
CVE-2020-1963: File system access via H2 in Apache Ignite
CVE-2020-1963 · Severity: low · CVSS 3.1 · Published 2020-06-05
Technologies: org.apache.ignite:ignite-core (Maven). Vendors: Maven.
Related threats
- Apache Ignite path traversal in REST API
- Apache Ignite: Possible RCE when deserializing incoming messages by the server node
- Code execution via deserialization in org.apache.ignite:ignite-core
- Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization
- Moderate severity vulnerability that affects org.apache.ignite:ignite-core