NVD

Id
87484  
Name
CVE-2017-7686  
Description
Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-28  
Modified Date
2017-07-06  
Seq
2017-7686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
425872 87484 CVE-2017-2525 98473  View
426394 87484 CVE-2017-1100 http://www.ibm.com/support/docview.wss?uid=swg22004428  View
426395 87484 CVE-2017-1100 99006  View
426396 87484 CVE-2017-1100 https://exchange.xforce.ibmcloud.com/vulnerabilities/120661  View
426397 87484 CVE-2017-1100 http://www.ibm.com/support/docview.wss?uid=swg22004428  View
426398 87484 CVE-2017-1100 99006  View
426399 87484 CVE-2017-1100 https://exchange.xforce.ibmcloud.com/vulnerabilities/120661  View
426400 87484 CVE-2017-1100 http://www.ibm.com/support/docview.wss?uid=swg22004428  View
426401 87484 CVE-2017-1100 99006  View
426402 87484 CVE-2017-1100 https://exchange.xforce.ibmcloud.com/vulnerabilities/120661  View

Related JVN