CVE-2017-7686

Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information.

• CWE-200

• http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2017-7686-Apache-Ignite-Information-Disclosure-td19168.htmlMitigation, Third Party Advisory
• http://www.securityfocus.com/bid/99292Third Party Advisory, VDB Entry
• http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2017-7686-Apache-Ignite-Information-Disclosure-td19168.htmlMitigation, Third Party Advisory
• http://www.securityfocus.com/bid/99292Third Party Advisory, VDB Entry

Published

Jun 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7680Apache OpenMeetings 1.0.0 has an overly permissive crossdoma…
• CVE-2017-7681Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. Th…
• CVE-2017-7682Apache OpenMeetings 3.2.0 is vulnerable to parameter manipul…
• CVE-2017-7683Apache OpenMeetings 1.0.0 displays Tomcat version and detail…
• CVE-2017-7684Apache OpenMeetings 1.0.0 doesn't check contents of files be…
• CVE-2017-7685Apache OpenMeetings 1.0.0 responds to the following insecure…
• CVE-2017-7687When handling a decoding failure for a malformed URL path of…
• CVE-2017-7688Apache OpenMeetings 1.0.0 updates user password in insecure …
• CVE-2017-7689A Command Injection vulnerability in Schneider Electric home…9.8
• CVE-2017-7690Proxifier for Mac before 2.19.2, when first run, allows loca…7.8
• CVE-2017-7691A code injection vulnerability exists in SAP TREX / Business…
• CVE-2017-7692SquirrelMail 1.4.22 (and other versions before 20170427_0200…