GHSA-MWCX-532G-8PQ3 Access and integrity issue within Eclipse Jetty

🗓️ 16 Oct 2018 17:44:11Reported by GoogleType

osv

osv🔗 osv.dev👁 30 Views

Access and integrity issue in Eclipse Jetty v9.4.0-9.4.

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Apr 202503:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed	22 Dec 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Jetty Affect IBM Sterling B2B Integrator	5 Feb 202000:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2024 - Multiple CVEs addressed	15 Apr 202502:37	–	ibm
BDU FSTEC	The vulnerability in the implementation of the FileSessionDataStore class for the Jetty HTTP server allows a perpetrator to gain unauthorized access to protected information.	3 Dec 201900:00	–	bdu_fstec
CNVD	Eclipse Jetty Elevation of Privilege Vulnerability	25 Jun 201800:00	–	cnvd
CVE	CVE-2018-12538	22 Jun 201819:00	–	cve
Cvelist	CVE-2018-12538	22 Jun 201819:00	–	cvelist
Debian CVE	CVE-2018-12538	22 Jun 201819:00	–	debiancve
EUVD	EUVD-2018-0645	7 Oct 202500:30	–	euvd

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-12538
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi
github	www.github.com/advisories/GHSA-mwcx-532g-8pq3
lists	www.lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
security	www.security.netapp.com/advisory/ntap-20181014-0001
oracle	www.oracle.com/security-alerts/cpuoct2020.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
securitytracker	www.securitytracker.com/id/1041194

17 Feb 2024 05:43Current

9High risk

Vulners AI Score9

CVSS 38.8

EPSS0.02689

eclipse jetty access issue integrity filesessiondatastore httpsession filesystem security