Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-10247


In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.


Published

2019-04-22T20:29:00.367

Last Modified

2024-11-21T04:18:44.293

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-213
  • Type: Primary
    CWE-200

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.0 Yes
Application eclipse jetty 7.0.1 Yes
Application eclipse jetty 7.0.2 Yes
Application eclipse jetty 7.0.2 Yes
Application eclipse jetty 7.1.0 Yes
Application eclipse jetty 7.1.0 Yes
Application eclipse jetty 7.1.0 Yes
Application eclipse jetty 7.1.1 Yes
Application eclipse jetty 7.1.2 Yes
Application eclipse jetty 7.1.3 Yes
Application eclipse jetty 7.1.4 Yes
Application eclipse jetty 7.1.5 Yes
Application eclipse jetty 7.1.6 Yes
Application eclipse jetty 7.2.0 Yes
Application eclipse jetty 7.2.0 Yes
Application eclipse jetty 7.2.1 Yes
Application eclipse jetty 7.2.2 Yes
Application eclipse jetty 7.3.0 Yes
Application eclipse jetty 7.3.1 Yes
Application eclipse jetty 7.4.0 Yes
Application eclipse jetty 7.4.0 Yes
Application eclipse jetty 7.4.1 Yes
Application eclipse jetty 7.4.2 Yes
Application eclipse jetty 7.4.3 Yes
Application eclipse jetty 7.4.3 Yes
Application eclipse jetty 7.4.4 Yes
Application eclipse jetty 7.4.5 Yes
Application eclipse jetty 7.5.0 Yes
Application eclipse jetty 7.5.0 Yes
Application eclipse jetty 7.5.0 Yes
Application eclipse jetty 7.5.0 Yes
Application eclipse jetty 7.5.1 Yes
Application eclipse jetty 7.5.2 Yes
Application eclipse jetty 7.5.3 Yes
Application eclipse jetty 7.5.4 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.0 Yes
Application eclipse jetty 7.6.1 Yes
Application eclipse jetty 7.6.2 Yes
Application eclipse jetty 7.6.2 Yes
Application eclipse jetty 7.6.3 Yes
Application eclipse jetty 7.6.3 Yes
Application eclipse jetty 7.6.4 Yes
Application eclipse jetty 7.6.4 Yes
Application eclipse jetty 7.6.5 Yes
Application eclipse jetty 7.6.5 Yes
Application eclipse jetty 7.6.6 Yes
Application eclipse jetty 7.6.7 Yes
Application eclipse jetty 7.6.8 Yes
Application eclipse jetty 7.6.9 Yes
Application eclipse jetty 7.6.10 Yes
Application eclipse jetty 7.6.11 Yes
Application eclipse jetty 7.6.11 Yes
Application eclipse jetty 7.6.12 Yes
Application eclipse jetty 7.6.13 Yes
Application eclipse jetty 7.6.13 Yes
Application eclipse jetty 7.6.14 Yes
Application eclipse jetty 7.6.15 Yes
Application eclipse jetty 7.6.16 Yes
Application eclipse jetty 7.6.17 Yes
Application eclipse jetty 7.6.18 Yes
Application eclipse jetty 7.6.19 Yes
Application eclipse jetty 7.6.20 Yes
Application eclipse jetty 7.6.21 Yes
Application eclipse jetty 8.0.0 Yes
Application eclipse jetty 8.0.0 Yes
Application eclipse jetty 8.0.0 Yes
Application eclipse jetty 8.0.0 Yes
Application eclipse jetty 8.0.0 Yes
Application eclipse jetty 8.0.0 Yes
Application eclipse jetty 8.0.1 Yes
Application eclipse jetty 8.0.2 Yes
Application eclipse jetty 8.0.3 Yes
Application eclipse jetty 8.0.4 Yes
Application eclipse jetty 8.1.0 Yes
Application eclipse jetty 8.1.0 Yes
Application eclipse jetty 8.1.0 Yes
Application eclipse jetty 8.1.0 Yes
Application eclipse jetty 8.1.0 Yes
Application eclipse jetty 8.1.0 Yes
Application eclipse jetty 8.1.1 Yes
Application eclipse jetty 8.1.2 Yes
Application eclipse jetty 8.1.2 Yes
Application eclipse jetty 8.1.3 Yes
Application eclipse jetty 8.1.4 Yes
Application eclipse jetty 8.1.5 Yes
Application eclipse jetty 8.1.5 Yes
Application eclipse jetty 8.1.6 Yes
Application eclipse jetty 8.1.7 Yes
Application eclipse jetty 8.1.8 Yes
Application eclipse jetty 8.1.9 Yes
Application eclipse jetty 8.1.10 Yes
Application eclipse jetty 8.1.11 Yes
Application eclipse jetty 8.1.12 Yes
Application eclipse jetty 8.1.12 Yes
Application eclipse jetty 8.1.13 Yes
Application eclipse jetty 8.1.13 Yes
Application eclipse jetty 8.1.14 Yes
Application eclipse jetty 8.1.15 Yes
Application eclipse jetty 8.1.16 Yes
Application eclipse jetty 8.1.17 Yes
Application eclipse jetty 8.1.18 Yes
Application eclipse jetty 8.1.19 Yes
Application eclipse jetty 8.1.20 Yes
Application eclipse jetty 8.1.21 Yes
Application eclipse jetty 8.1.22 Yes
Application eclipse jetty 8.2.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.0 Yes
Application eclipse jetty 9.0.1 Yes
Application eclipse jetty 9.0.2 Yes
Application eclipse jetty 9.0.2 Yes
Application eclipse jetty 9.0.3 Yes
Application eclipse jetty 9.0.4 Yes
Application eclipse jetty 9.0.4 Yes
Application eclipse jetty 9.0.5 Yes
Application eclipse jetty 9.0.5 Yes
Application eclipse jetty 9.0.6 Yes
Application eclipse jetty 9.0.6 Yes
Application eclipse jetty 9.0.7 Yes
Application eclipse jetty 9.0.7 Yes
Application eclipse jetty 9.1.0 Yes
Application eclipse jetty 9.1.0 Yes
Application eclipse jetty 9.1.0 Yes
Application eclipse jetty 9.1.0 Yes
Application eclipse jetty 9.1.0 Yes
Application eclipse jetty 9.1.1 Yes
Application eclipse jetty 9.1.2 Yes
Application eclipse jetty 9.1.3 Yes
Application eclipse jetty 9.1.4 Yes
Application eclipse jetty 9.1.5 Yes
Application eclipse jetty 9.1.6 Yes
Application eclipse jetty 9.1.6 Yes
Application eclipse jetty 9.2.0 Yes
Application eclipse jetty 9.2.0 Yes
Application eclipse jetty 9.2.0 Yes
Application eclipse jetty 9.2.0 Yes
Application eclipse jetty 9.2.0 Yes
Application eclipse jetty 9.2.1 Yes
Application eclipse jetty 9.2.2 Yes
Application eclipse jetty 9.2.3 Yes
Application eclipse jetty 9.2.4 Yes
Application eclipse jetty 9.2.5 Yes
Application eclipse jetty 9.2.6 Yes
Application eclipse jetty 9.2.6 Yes
Application eclipse jetty 9.2.7 Yes
Application eclipse jetty 9.2.8 Yes
Application eclipse jetty 9.2.9 Yes
Application eclipse jetty 9.2.10 Yes
Application eclipse jetty 9.2.11 Yes
Application eclipse jetty 9.2.11 Yes
Application eclipse jetty 9.2.11 Yes
Application eclipse jetty 9.2.12 Yes
Application eclipse jetty 9.2.12 Yes
Application eclipse jetty 9.2.13 Yes
Application eclipse jetty 9.2.14 Yes
Application eclipse jetty 9.2.15 Yes
Application eclipse jetty 9.2.16 Yes
Application eclipse jetty 9.2.16 Yes
Application eclipse jetty 9.2.17 Yes
Application eclipse jetty 9.2.18 Yes
Application eclipse jetty 9.2.19 Yes
Application eclipse jetty 9.2.20 Yes
Application eclipse jetty 9.2.21 Yes
Application eclipse jetty 9.2.22 Yes
Application eclipse jetty 9.2.23 Yes
Application eclipse jetty 9.2.24 Yes
Application eclipse jetty 9.2.25 Yes
Application eclipse jetty 9.2.26 Yes
Application eclipse jetty 9.2.27 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.0 Yes
Application eclipse jetty 9.3.1 Yes
Application eclipse jetty 9.3.2 Yes
Application eclipse jetty 9.3.3 Yes
Application eclipse jetty 9.3.3 Yes
Application eclipse jetty 9.3.4 Yes
Application eclipse jetty 9.3.4 Yes
Application eclipse jetty 9.3.4 Yes
Application eclipse jetty 9.3.4 Yes
Application eclipse jetty 9.3.5 Yes
Application eclipse jetty 9.3.6 Yes
Application eclipse jetty 9.3.7 Yes
Application eclipse jetty 9.3.7 Yes
Application eclipse jetty 9.3.7 Yes
Application eclipse jetty 9.3.8 Yes
Application eclipse jetty 9.3.8 Yes
Application eclipse jetty 9.3.8 Yes
Application eclipse jetty 9.3.9 Yes
Application eclipse jetty 9.3.9 Yes
Application eclipse jetty 9.3.9 Yes
Application eclipse jetty 9.3.10 Yes
Application eclipse jetty 9.3.10 Yes
Application eclipse jetty 9.3.11 Yes
Application eclipse jetty 9.3.11 Yes
Application eclipse jetty 9.3.12 Yes
Application eclipse jetty 9.3.13 Yes
Application eclipse jetty 9.3.13 Yes
Application eclipse jetty 9.3.14 Yes
Application eclipse jetty 9.3.15 Yes
Application eclipse jetty 9.3.16 Yes
Application eclipse jetty 9.3.16 Yes
Application eclipse jetty 9.3.17 Yes
Application eclipse jetty 9.3.17 Yes
Application eclipse jetty 9.3.18 Yes
Application eclipse jetty 9.3.19 Yes
Application eclipse jetty 9.3.20 Yes
Application eclipse jetty 9.3.21 Yes
Application eclipse jetty 9.3.21 Yes
Application eclipse jetty 9.3.21 Yes
Application eclipse jetty 9.3.22 Yes
Application eclipse jetty 9.3.23 Yes
Application eclipse jetty 9.3.24 Yes
Application eclipse jetty 9.3.25 Yes
Application eclipse jetty 9.3.26 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.0 Yes
Application eclipse jetty 9.4.1 Yes
Application eclipse jetty 9.4.1 Yes
Application eclipse jetty 9.4.2 Yes
Application eclipse jetty 9.4.2 Yes
Application eclipse jetty 9.4.3 Yes
Application eclipse jetty 9.4.3 Yes
Application eclipse jetty 9.4.4 Yes
Application eclipse jetty 9.4.4 Yes
Application eclipse jetty 9.4.4 Yes
Application eclipse jetty 9.4.5 Yes
Application eclipse jetty 9.4.5 Yes
Application eclipse jetty 9.4.6 Yes
Application eclipse jetty 9.4.6 Yes
Application eclipse jetty 9.4.7 Yes
Application eclipse jetty 9.4.7 Yes
Application eclipse jetty 9.4.7 Yes
Application eclipse jetty 9.4.8 Yes
Application eclipse jetty 9.4.8 Yes
Application eclipse jetty 9.4.9 Yes
Application eclipse jetty 9.4.10 Yes
Application eclipse jetty 9.4.10 Yes
Application eclipse jetty 9.4.10 Yes
Application eclipse jetty 9.4.11 Yes
Application eclipse jetty 9.4.12 Yes
Application eclipse jetty 9.4.12 Yes
Application eclipse jetty 9.4.12 Yes
Application eclipse jetty 9.4.12 Yes
Application eclipse jetty 9.4.13 Yes
Application eclipse jetty 9.4.14 Yes
Application eclipse jetty 9.4.15 Yes
Application netapp oncommand_system_manager ≤ 3.1.3 Yes
Application netapp snap_creator_framework - Yes
Application netapp snapcenter - Yes
Application netapp snapmanager - Yes
Application netapp snapmanager - Yes
Application netapp storage_replication_adapter_for_clustered_data_ontap ≥ 9.6 Yes
Application netapp storage_services_connector - Yes
Application netapp vasa_provider_for_clustered_data_ontap ≥ 9.6 Yes
Application netapp virtual_storage_console ≥ 9.6 Yes
Operating System netapp element - Yes
Application oracle autovue 21.0.2 Yes
Application oracle communications_analytics 12.1.1 Yes
Application oracle communications_element_manager 8.0.0 Yes
Application oracle communications_element_manager 8.1.0 Yes
Application oracle communications_element_manager 8.1.1 Yes
Application oracle communications_element_manager 8.2.0 Yes
Application oracle communications_services_gatekeeper 6.0 Yes
Application oracle communications_services_gatekeeper 6.1 Yes
Application oracle communications_services_gatekeeper 7.0 Yes
Application oracle communications_session_report_manager 8.0.0 Yes
Application oracle communications_session_report_manager 8.1.0 Yes
Application oracle communications_session_report_manager 8.1.1 Yes
Application oracle communications_session_report_manager 8.2.0 Yes
Application oracle communications_session_route_manager 8.0.0 Yes
Application oracle communications_session_route_manager 8.1.0 Yes
Application oracle communications_session_route_manager 8.1.1 Yes
Application oracle communications_session_route_manager 8.2.0 Yes
Application oracle data_integrator 12.2.1.3.0 Yes
Application oracle data_integrator 12.2.1.4.0 Yes
Application oracle endeca_information_discovery_integrator 3.2.0 Yes
Application oracle enterprise_manager_base_platform 13.2 Yes
Application oracle enterprise_manager_base_platform 13.3 Yes
Application oracle flexcube_core_banking ≤ 11.7.0 Yes
Application oracle flexcube_core_banking 5.2.0 Yes
Application oracle flexcube_private_banking 12.0.0 Yes
Application oracle flexcube_private_banking 12.1.0 Yes
Application oracle fmw_platform 12.2.1.3.0 Yes
Application oracle fmw_platform 12.2.1.4.0 Yes
Application oracle hospitality_guest_access 4.2.0 Yes
Application oracle hospitality_guest_access 4.2.1 Yes
Application oracle retail_xstore_point_of_service 7.1 Yes
Application oracle retail_xstore_point_of_service 15.0 Yes
Application oracle retail_xstore_point_of_service 16.0 Yes
Application oracle retail_xstore_point_of_service 17.0 Yes
Application oracle unified_directory 12.2.1.3.0 Yes
Application oracle unified_directory 12.2.1.4.0 Yes
Operating System debian debian_linux 9.0 Yes
Operating System debian debian_linux 10.0 Yes

References