Test Kennung:	1.3.6.1.4.1.25623.1.0.142309
Kategorie:	Web Servers
Titel:	Eclipse Jetty Information Disclosure Vulnerability (CVE-2019-10247) - Linux
Zusammenfassung:	Eclypse Jetty is prone to an information disclosure vulnerability.
Beschreibung:	Summary: Eclypse Jetty is prone to an information disclosure vulnerability. Vulnerability Insight: The DefaultHandler will present the full path to the Resource Base directory, if the server is configured with only non-root contexts. Affected Software/OS: Eclipse Jetty version 7.x and prior, 8.x, 9.2.27.v20190403 and prior, 9.3.26.v20190403 and prior and 9.4.16.v20190411 and prior. Solution: Update to version 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-10247 https://bugs.eclipse.org/bugs/show_bug.cgi?id=546577 https://security.netapp.com/advisory/ntap-20190509-0003/ Debian Security Information: DSA-4949 (Google Search) https://www.debian.org/security/2021/dsa-4949 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2020.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4@%3Cissues.activemq.apache.org%3E https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E
Copyright	Copyright (C) 2019 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.