CVE-2021-28164

🗓️ 01 Apr 2021 14:20:14Reported by eclipseType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 483 Views

Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224 allows unauthorized access to WEB-INF director

Reporter	Title	Published	Views	Family All 90
0day.today	Jetty 9.4.37.v20210219 - Information Disclosure Vulnerability	22 Oct 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to multiple Eclipse Jetty issues	24 Jun 202216:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	17 May 202302:32	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	29 Mar 202206:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM Installation Manager and IBM Packaging Utility	24 Jun 202116:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Mobile Enterprise Gateway uses Eclipse Jetty with multiple known vulnerabilities	6 Jun 202218:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Change 5.3.2 Fix Pack 04 and earlier versions.	11 Oct 202208:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Eclipse Jetty affect Rational Performance Tester (CVE-2021-28169, CVE-2021-34428, CVE-2021-28163, CVE-2021-28164, CVE-2021-34429, CVE-2021-28165)	29 Jul 202220:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to multiple vulnerabilities due to Eclipse Jetty	1 Jun 202211:34	–	ibm

NVD

Node

eclipse jettyMatch9.4.3720210219

eclipse jettyMatch9.4.3820210224

Node

netapp cloud_managerMatch-

netapp e-series_performance_analyzerMatch-

netapp e-series_santricity_os_controllerRange11.0–11.70.1

netapp e-series_santricity_web_servicesMatch-web_services_proxy

netapp element_plug-in_for_vcenter_serverMatch-

netapp santricity_cloud_connectorMatch-

netapp snapcenterMatch-

netapp snapcenter_plug-inMatch-vmware_vsphere

netapp storage_replication_adapter_for_clustered_data_ontapRange9.6≥vmware_vsphere

netapp vasa_provider_for_clustered_data_ontapRange9.6≥

netapp virtual_storage_consoleRange9.6≥vmware_vsphere

Node

oracle autovue_for_agile_product_lifecycle_managementMatch21.0.2

oracle banking_apisMatch20.1

oracle banking_apisMatch21.1

oracle banking_digital_experienceMatch20.1

oracle banking_digital_experienceMatch21.1

oracle communications_session_route_managerRange8.0.0–8.2.4

oracle siebel_core_-_automationRange≤21.9

[
  {
    "product": "Eclipse Jetty",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "9.4.37.v20210219",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.4.38.v20210224",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2022.html
packetstormsecurity	www.packetstormsecurity.com/files/164590/Jetty-9.4.37.v20210219-Information-Disclosure.html
lists	www.lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E
lists	www.lists.apache.org/thread.html/r763840320a80e515331cbc1e613fa93f25faf62e991974171a325c82%40%3Cdev.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r90e7b4c42a96d74c219e448bee6a329ab0cd3205c44b63471d96c3ab%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E
lists	www.lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E
lists	www.lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r3c55b0baa4dc38958ae147b2f216e212605f1071297f845e14477d36%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E

21 Nov 2024 05:59Current

5.2Medium risk

Vulners AI Score5.2

CVSS 25

CVSS 3.15.3

EPSS0.93485