VDB
BDU%3A2020-05188
BDU%3A2020-05188
PUBLISHED
CVSS 9.699999809265137 CRITICAL
Уязвимость контейнера сервлетов Eclipse Jetty, связанная с дублированием операций на ресурсе, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации, выполнить произвольный код или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
9.699999809265137
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Oracle Corp., Red Hat Inc., Fedora Project, Eclipse Foundation, CD Foundation | Debian GNU/Linux, FMW Platform, Jboss Fuse, Oracle Hospitality Guest Access, Application Testing Suite, Fedora, Oracle FLEXCUBE Private Banking, Oracle Communications Element Manager, Oracle Communications Session Report Manager, Oracle Communications Session Route Manager, Communications Application Session Controller, Jetty, Jenkins |
Timeline
- Nov 17, 2020 CVE Published
- May 18, 2021 CVE Updated
References
- https://security-tracker.debian.org/tracker/CVE-2019-17638 url
- https://www.jenkins.io/security/advisory/2020-08-17/ url
- https://www.oracle.com/security-alerts/cpuapr2021.html url
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=564984 advisory
- https://access.redhat.com/security/cve/cve-2019-17638 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XE6US6VPZHOWFMUSFGDS5V2DNQPY5MKB/ advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html advisory