CVE-2020-1963GHSA-5WM5-8Q42-RHXG
Apache Ignite uses H2 database to build SQL distributed execution engine.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.8.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a Apache Ignite
All versions of Apache Ignite up to 2.8
- org.apache.ignite:ignite-coreMaven
fixed in 2.8.1
References 10
openwall.com
lists.apache.org
- thread.html/rdf37011b92a31a67c299ff45655e2638f194fc814e5c6e2fde352884@<user.ignite.apache.org>
- thread.html/rdf37011b92a31a67c299ff45655e2638f194fc814e5c6e2fde352884@<dev.ignite.apache.org>
- thread.html/rf032a13a4711f88c0a2c0734eecbee1026cc1b6cde27d16a653f8755@<dev.ignite.apache.org>
- thread.html/rd43ae18588fd7bdb375be63bc95a651aab319ced6306759e1237ce67@<dev.ignite.apache.org>
- thread.html/r119024ef71c8d39f952df0950a275d09714715179aff544aea0129a3@<user.ignite.apache.org>
- thread.html/re7b43cf8333ee30b6589e465f72a6ed4a082222612d1a0fdd30beb94@<dev.ignite.apache.org>
- thread.html/re7b43cf8333ee30b6589e465f72a6ed4a082222612d1a0fdd30beb94@<user.ignite.apache.org>
- thread.html/r1933faf8a26c431f38a5f8dbbfab80254454e54e33a79be474b67dc4@<dev.ignite.apache.org>