HTTP/2 denial of service vulnerability in bundled Jetty

🗓️ 20 Mar 2024 00:00:00Reported by Jenkins Security TeamType

Jenkins vulnerable to HTTP/2 DoS in old Jetty; update to 2.444/2.440.2 with Jetty 10.0.20 or disable HTTP/2.

Reporter	Title	Published	Views	Family All 123
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining CVE-2024-22201	29 Mar 202410:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	15 Apr 202505:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for May 2024 - Multiple CVEs addressed	14 Jun 202409:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM MQ affect IBM Robotic Process Automation.	14 Oct 202404:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by a vulnerability in Eclipse Jetty (CVE-2024-22201)	27 Jun 202400:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	29 Oct 202420:40	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty.	30 Jul 202417:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	5 Jun 202512:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2024-22201, CVE-2023-51775)	4 Sep 202415:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Change	8 Oct 202413:07	–	ibm

Vulners

Node

jenkins jenkinsRange<2.440.2lts

20 Mar 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.01433

SSVC