[IGNITE-8472] Apache ignite for .NET has security vulnerabilities

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Duplicate
• Affects Version/s: 2.4
• Assignee: Unassigned
• Reporter: Harendra Rai
• Created: 11/May/18 13:27
• Updated: 22/Apr/20 08:34
• Resolved: 11/May/18 16:00

Description

There are two vulnerabilities in the latest 2.3.0 version.

1. commons-beanutils-1.8.3.jar.  Here is the vulnerability id CVE-2014-0114 :  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0114

Resolution to this issue is: Upgrade Commons BeanUtils to the latest version >= commons-beanutils-1.9.2

1. commons-codec-1.6.jar: Here is the vulnerability detail https://issues.apache.org/jira/browse/CODEC-96

Resolution to this issue is: To upgrade to the latest available Version 1.11

Issue Links

• duplicates: IGNITE-8471 Apache ignite for .NET has security vulnerabilities