Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-5614
HistoryDec 05, 2007 - 11:46 a.m.

CVE-2007-5614

2007-12-0511:46:00
[email protected]
web.nvd.nist.gov
8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.03

Percentile

91.1%

JSON

Mortbay Jetty before 6.1.6rc1 does not properly handle “certain quote sequences” in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

Affected configurations

Nvd
Node
mortbay_jettyjettyMatch1.0
OR
mortbay_jettyjettyMatch2.4
OR
mortbay_jettyjettyMatch3.0
OR
mortbay_jettyjettyMatch3.1
OR
mortbay_jettyjettyMatch4.0
OR
mortbay_jettyjettyMatch4.1
OR
mortbay_jettyjettyMatch4.2
OR
mortbay_jettyjettyMatch5
OR
mortbay_jettyjettyMatch5.1
OR
mortbay_jettyjettyMatch6
OR
mortbay_jettyjettyMatch6.1
VendorProductVersionCPE
mortbay_jettyjetty1.0cpe:2.3:a:mortbay_jetty:jetty:1.0:*:*:*:*:*:*:*
mortbay_jettyjetty2.4cpe:2.3:a:mortbay_jetty:jetty:2.4:*:*:*:*:*:*:*
mortbay_jettyjetty3.0cpe:2.3:a:mortbay_jetty:jetty:3.0:*:*:*:*:*:*:*
mortbay_jettyjetty3.1cpe:2.3:a:mortbay_jetty:jetty:3.1:*:*:*:*:*:*:*
mortbay_jettyjetty4.0cpe:2.3:a:mortbay_jetty:jetty:4.0:*:*:*:*:*:*:*
mortbay_jettyjetty4.1cpe:2.3:a:mortbay_jetty:jetty:4.1:*:*:*:*:*:*:*
mortbay_jettyjetty4.2cpe:2.3:a:mortbay_jetty:jetty:4.2:*:*:*:*:*:*:*
mortbay_jettyjetty5cpe:2.3:a:mortbay_jetty:jetty:5:*:*:*:*:*:*:*
mortbay_jettyjetty5.1cpe:2.3:a:mortbay_jetty:jetty:5.1:*:*:*:*:*:*:*
mortbay_jettyjetty6cpe:2.3:a:mortbay_jetty:jetty:6:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

Related

cvelist 1
cve 1
redhatcve 1
github 1
osv 1
veracode 1
prion 1
cert 1
openvas 6
fedora 2
freebsd 1
nessus 3
cvelist
cvelist
CVE-2007-5614
2007-12-05 11:00:00
cve
cve
CVE-2007-5614
2007-12-05 11:46:00
redhatcve
redhatcve
CVE-2007-5614
2019-10-04 21:10:06
github
github
Improper Authentication in Mortbay Jetty
2022-05-01 18:35:01
osv
osv
Improper Authentication in Mortbay Jetty
2022-05-01 18:35:01
veracode
veracode
Session Hijacking
2018-11-15 01:29:46
prion
prion
Hardcoded credentials
2007-12-05 11:46:00
cert
cert
Mortbay Jetty fails to properly handle cookies with quotes
2007-12-04 00:00:00
openvas
openvas
Fedora Update for jetty FEDORA-2008-6164
2009-02-17 00:00:00
Fedora Update for jetty FEDORA-2008-6141
2009-02-17 00:00:00
FreeBSD Ports: jetty
2008-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: jetty-5.1.14-1jpp.2.fc9
2008-07-06 06:16:00
[SECURITY] Fedora 8 Update: jetty-5.1.14-1jpp.1.fc8
2008-07-06 06:17:49
freebsd
freebsd
jetty -- multiple vulnerabilities
2007-12-05 00:00:00
nessus
nessus
FreeBSD : jetty -- multiple vulnerabilities (6ae7cef2-a6ae-11dc-95e6-000c29c5647f)
2007-12-11 00:00:00
Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)
2008-07-08 00:00:00
Fedora 8 : jetty-5.1.14-1jpp.1.fc8 (2008-6164)
2008-07-08 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.03

Percentile

91.1%

JSON
Related for NVD:CVE-2007-5614
cvelist1cve1redhatcve1github1osv1veracode1prion1cert1openvas6fedora2freebsd1nessus3