The vulnerability of the SslConnections component in Eclipse Jetty servers allows a attacker to cause a service failure.

🗓️ 15 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The SslConnections vulnerability in Eclipse Jetty servers allows remote service failures due to resource release errors.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Zookeeper affecting IBM QRadar User Behavior Analytics (CVE-2022-2191, CVE-2022-2047, CVE-2022-2048, CVE-2022-24823, CVE-2020-36518)	29 Sep 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Service Tester contains vulnerabilities which could affect Eclipse Jetty. Rational Service Tester has taken steps to mitigate these vulnerabilities.	22 Nov 202213:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	17 May 202302:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Change 5.3.2 Fix Pack 04 and earlier versions.	11 Oct 202208:56	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty. Rational Performance Tester has taken steps to mitigate these vulnerabilities.	22 Nov 202213:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Synergy 7.2.2 Fix Pack 04 and earlier versions.	11 Oct 202213:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse affect IBM Installation Manager and IBM Packaging Utility	23 Apr 202519:56	–	ibm
ATTACKERKB	CVE-2022-2191	7 Jul 202221:15	–	attackerkb
Broadcom	Statement on Jetty vulnerabilities in Brocade SANav	1 May 202400:00	–	broadcom

Vulners

Node

eclipse jettyRange10.0.0–10.0.9

eclipse jettyRange11.0.0–11.0.9

red_hat red_hat_enterprise_linuxMatch8

Source	Link
security	www.security.netapp.com/advisory/ntap-20220909-0003/
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-8mpp-f3f7-xc28
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-2191
access	www.access.redhat.com/security/cve/CVE-2020-35527
web	www.web.nvd.nist.gov/view/vuln/detail

15 Sep 2023 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 37.5

CVSS 27.8

EPSS0.02036