High
Security advisory
Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-7686
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 08:05 UTC · Revision 1
Source evidence
Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information.
osv:CVE-2017-7686
Complete source record
{
"id": "b745530ab6d1fb030f60ef5b4202a28d162a5b735a6deab27685edaae5e7e177",
"url": "https://osv.dev/vulnerability/CVE-2017-7686",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-7686",
"summary": "Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information.",
"evidence": "osv:CVE-2017-7686",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-7686",
"aliases": [
"CVE-2017-7686",
"GHSA-8p83-68cw-943f"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/apache/ignite",
"type": "GIT",
"events": [
{
"introduced": "5fc2cd053467e65872f796e11e3edd2e6017d80d"
},
{
"last_affected": "d4eef3c68ff116ee34bc13648cd82c640b3ea072"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:apache:ignite:1.0.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0"
},
{
"last_affected": "1.0.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.0.0:rc3:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0-rc3"
},
{
"last_affected": "1.0.0-rc3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.1.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.1.0"
},
{
"last_affected": "1.1.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.2.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.2.0"
},
{
"last_affected": "1.2.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.3.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.3.0"
},
{
"last_affected": "1.3.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.0"
},
{
"last_affected": "1.4.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.5.0:b1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.0-b1"
},
{
"last_affected": "1.5.0-b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.5.0:final:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.0-final"
},
{
"last_affected": "1.5.0-final"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.6.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.6.0"
},
{
"last_affected": "1.6.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.7.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.7.0"
},
{
"last_affected": "1.7.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.8.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.8.0"
},
{
"last_affected": "1.8.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:1.9.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.9.0"
},
{
"last_affected": "1.9.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:ignite:2.0.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.0"
},
{
"last_affected": "2.0.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.0.0",
"1.0.0-rc3",
"1.1.0",
"1.2.0",
"1.3.0",
"1.4.0",
"1.5.0-b1",
"1.5.0-final",
"1.6.0",
"1.7.0",
"1.8.0",
"1.9.0",
"2.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7686.json"
}
}
],
"modified": "2026-10-24T10:31:02.791904754Z",
"provider": "osv",
"references": [],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2017-7686",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 440097,
"published_at": "2017-06-28T13:29:00.217+00:00"
}