Lucene search
K

CVE-2023-41900

🗓️ 15 Sep 2023 20:17:42Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 501 Views

Jetty web server vulnerable to weak authentication, allows bypassing authentication after rejection by LoginServic

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed
15 Nov 202313:37
ibm
IBM Security Bulletins
Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester
18 Dec 202312:04
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector
22 Oct 202512:16
ibm
IBM Security Bulletins
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in its dependencies (CVE-2022-45688, CVE-2023-28439, CVE-2023-33201, CVE-2023-41900, CVE-2023-36479, CVE-2023-40167, CVE-2023-36478, )
24 Mar 202514:16
ibm
IBM Security Bulletins
Security Bulletin: IBM Sterling Connect:Direct Browser User Interface is vulnerable to multiple vulnerabilities due to Eclipse Jetty
24 Nov 202302:40
ibm
IBM Security Bulletins
Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse Jetty (CVE-2023-40167, CVE-2023-41900, CVE-2023-36479, CVE-2023-36478)
15 Dec 202316:26
ibm
IBM Security Bulletins
Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN Module affected by multiple vulnerabilities
6 Feb 202419:49
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in Rational Change
8 Oct 202413:07
ibm
IBM Security Bulletins
Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty.
21 Feb 202413:17
ibm
IBM Security Bulletins
Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues
8 Mar 202422:36
ibm
Rows per page
NVD
Vulners
Node
eclipsejettyRange9.4.219.4.52
OR
eclipsejettyRange10.0.010.0.16
OR
eclipsejettyRange11.0.011.0.16
Node
[
  {
    "vendor": "eclipse",
    "product": "jetty.project",
    "versions": [
      {
        "version": ">= 9.4.21, <= 9.4.51",
        "status": "affected"
      },
      {
        "version": ">= 10.0.0, <= 10.0.15",
        "status": "affected"
      },
      {
        "version": ">= 11.0.0, <= 11.0.15",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 08:21Current
4.7Medium risk
Vulners AI Score4.7
CVSS 3.13.5 - 4.3
EPSS0.00141
SSVC
501