CVE-2020-1963: Critical severity apache ignite vulnerability
Published Jun 3, 2020
·Updated
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.
Affected Software
1 affected component
Apache Ignite<=2.8.0
Event History
Jun 3, 2020
CVE Published
via MITRE·12:53 PM
Data Sourced
via MITRE·12:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-1963?
CVE-2020-1963 is a vulnerability in Apache Ignite that allows an attacker to access the filesystem using SQL functions provided by the H2 database.
2
What software is affected by CVE-2020-1963?
Apache Ignite versions up to and including 2.8.0 are affected by CVE-2020-1963.
3
What is the severity of CVE-2020-1963?
CVE-2020-1963 has a severity rating of 9.1, which is classified as critical.
4
How can an attacker exploit CVE-2020-1963?
An attacker can exploit CVE-2020-1963 by using SQL functions provided by the H2 database to gain unauthorized access to the filesystem.
5
Is there a fix for CVE-2020-1963?
Yes, upgrading to a version of Apache Ignite that is not affected by the vulnerability is the recommended fix for CVE-2020-1963.