VDB
BDU%3A2019-04280
BDU%3A2019-04280
PUBLISHED
CVSS 6.5 MEDIUM
Уязвимость реализации класса FileSessionDataStore HTTP-сервера Jetty, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
6.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Eclipse Foundation | Retail Xstore Point of Service, Jetty |
Timeline
- Dec 3, 2019 CVE Published
References
- http://www.securitytracker.com/id/1041194 url
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=536018 url
- https://security.netapp.com/advisory/ntap-20181014-0001/ url
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html url
- https://www.oracle.com/security-alerts/cpuoct2019.html advisory