|Title:||Eclipse Jetty Server InvalidPathException Information Disclosure Vulnerability (Windows)|
|Summary:||The host is installed with Eclipse Jetty; Server and is prone to information disclosure vulnerability.|
The host is installed with Eclipse Jetty
Server and is prone to information disclosure vulnerability.
The flaw exists due to an improper handling
of bad queries.
Successful exploitation will allow an attacker
to disclose sensitive information.
Eclipse Jetty Server versions 9.2.x, 9.3.x
before 9.3.24.v20180605 and 9.4.x before 9.4.11.v20180605
Upgrade to Eclipse Jetty Server version
9.3.24.v20180605 or 9.4.11.v20180605 or later as per the series. For updates
refer to Reference links.
Common Vulnerability Exposure (CVE) ID: CVE-2018-12536|
|Copyright||Copyright (C) 2018 Greenbone Networks GmbH|
|This is only one of 71225 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.