Test Kennung:	1.3.6.1.4.1.25623.1.0.813551
Kategorie:	Web Servers
Titel:	Eclipse Jetty Server Fake Pipeline Request Security Bypass Vulnerability - Linux
Zusammenfassung:	Eclipse Jetty Server is prone to a security bypass vulnerability.
Beschreibung:	Summary: Eclipse Jetty Server is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists due to an improper validation against pipelined requests. Vulnerability Impact: Successful exploitation will allow an attacker to bypass authorization. Affected Software/OS: Eclipse Jetty Server versions 9.2.x before 9.2.25.v20180606, 9.3.x before 9.3.24.v20180605 and 9.4.x before 9.4.11.v20180605. Solution: Upgrade to Eclipse Jetty Server version 9.2.25.v20180606 or 9.3.24.v20180605 or 9.4.11.v20180605 or later as per the series. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7658 BugTraq ID: 106566 http://www.securityfocus.com/bid/106566 https://bugs.eclipse.org/bugs/show_bug.cgi?id=535669 https://security.netapp.com/advisory/ntap-20181014-0001/ https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Debian Security Information: DSA-4278 (Google Search) https://www.debian.org/security/2018/dsa-4278 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E http://www.securitytracker.com/id/1041194
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.