Moderate severity vulnerability that affects org.apache.ignite:ignite-core

2018-10-1620:53:31

Google

osv.dev

0.001 Low

EPSS

Percentile

30.0%

JSON

Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.

CPENameOperatorVersion
org.apache.ignite:ignite-coreeq1.4.0
org.apache.ignite:ignite-coreeq1.1.0-incubating
org.apache.ignite:ignite-coreeq1.5.0.final
org.apache.ignite:ignite-coreeq1.7.0
org.apache.ignite:ignite-coreeq1.3.0-incubating
org.apache.ignite:ignite-coreeq1.0.0
org.apache.ignite:ignite-coreeq1.0.0-RC3
org.apache.ignite:ignite-coreeq1.0.0-RC1
org.apache.ignite:ignite-coreeq1.5.0-b1
org.apache.ignite:ignite-coreeq1.8.0

Name	Operator	Version
org.apache.ignite:ignite-core	eq	1.4.0
org.apache.ignite:ignite-core	eq	1.1.0-incubating
org.apache.ignite:ignite-core	eq	1.5.0.final
org.apache.ignite:ignite-core	eq	1.7.0
org.apache.ignite:ignite-core	eq	1.3.0-incubating
org.apache.ignite:ignite-core	eq	1.0.0
org.apache.ignite:ignite-core	eq	1.0.0-RC3
org.apache.ignite:ignite-core	eq	1.0.0-RC1
org.apache.ignite:ignite-core	eq	1.5.0-b1
org.apache.ignite:ignite-core	eq	1.8.0