CVE-2016-6805

Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2017-04-07

Last modified

2024-08-06

Weaknesses

CWE-611

Affected products

• Ignite (Apache)

References

• http://seclists.org/oss-sec/2017/q2/31
• http://www.securityfocus.com/bid/97509