Back to search
CVE-2020-1963
Published: Jun 3, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.
| Vendor | Product | Versions |
|---|---|---|
n/a | Apache Ignite | affected All versions of Apache Ignite up to 2.8 |
References
[oss-security] 20200603 [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
[ignite-user] 20200603 RE: [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
[ignite-dev] 20200603 RE: [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
[ignite-dev] 20200605 Re: [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
[ignite-dev] 20200608 Re: [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
[ignite-user] 20200609 Re: [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
[ignite-dev] 20200615 Re: [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
[ignite-user] 20200615 Re: [CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability
mailing-list
x_refsource_MLIST
https://www.oracle.com/security-alerts/cpujan2022.html
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now