CVE-2017-7686

Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug…

published June 28, 2017

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02970 · 87.1th percentile
Published
2017-06-28T13:00Z
EPSS history
Timeline
  • 28 JUN 13:00Z
    Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug…
    cvelistv5