VDB
BDU%3A2019-04282
BDU%3A2019-04282
PUBLISHED
CVSS 5 MEDIUM
Уязвимость контейнера сервлетов Eclipse Jetty, связанная с отсутствием защиты служебных данных, позволяющая нарушителю раскрыть защищаемую информацию
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Eclipse Foundation | Oracle Endeca Information Discovery Integrator, Enterprise Manager Base Platform, Oracle Data Integrator, Oracle Hospitality Guest Access, Retail Xstore Point of Service, Jetty, AutoVue, Communications Analytics |
Timeline
- Dec 3, 2019 CVE Published
- Feb 24, 2021 CVE Updated
References
- https://www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html url
- https://nvd.nist.gov/vuln/detail/CVE-2019-10246 url
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546577 url
- https://www.oracle.com/security-alerts/cpujan2020.html url
- https://www.oracle.com/security-alerts/cpuoct2019.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546576 advisory