Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0. Users are recommended to upgrade to version 2.18.0, which fixes the issue.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any
    file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects
    Apache Ignite: from 2.0.0 through 2.17.0. Users are recommended to upgrade to version 2.18.0, which fixes
    the issue. (CVE-2025-48977)

ID	Name	Product	Family	Type	Severity
444275	SCA: security update for org.apache.ignite:ignite-core (GHSA-v45h-mqf4-6939)	Tenable Cloud Security	SCA Checks	Local	high
444275	SCA: security update for org.apache.ignite:ignite-core (GHSA-v45h-mqf4-6939)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2025-48977

high

Tenable Plugins

Coming Soon

high

high