Eclipse Jetty Access Control Error Vulnerability

🗓️ 26 Oct 2020 00:00:00Reported by China National Vulnerability DatabaseType

Jetty access control error allows shared temp dir race to read and write decompressed web applications.

Reporter	Title	Published	Views	Family All 111
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Apr 202503:05	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	27 Jan 202117:25	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Eclipse Jetty affects IBM Rational Service Tester (CVE-2020-27216)	25 Jan 202113:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Eclipse Jetty affect IBM Security Directory Integrator	15 May 202400:45	–	ibm
IBM Security Bulletins	Security Bulletin: Eclipse Jetty (Publicly disclosed vulnerability) affects Content Classifaction	27 Nov 202018:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Storage Scale Hadoop Connector	1 Jan 202407:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-27216

03 Nov 2020 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 24.4

CVSS 3.17

EPSS0.04352