PT-2022-6930 · Eclipse · Eclipse Jetty

🗓️ 07 Jul 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Eclipse Jetty vulnerability allows denial of service due to resource release errors in SslConnection.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Zookeeper affecting IBM QRadar User Behavior Analytics (CVE-2022-2191, CVE-2022-2047, CVE-2022-2048, CVE-2022-24823, CVE-2020-36518)	29 Sep 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Service Tester contains vulnerabilities which could affect Eclipse Jetty. Rational Service Tester has taken steps to mitigate these vulnerabilities.	22 Nov 202213:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	17 May 202302:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Expat, SQlite, libxml2, Libksba, zlib and GnuTLS	30 Nov 202208:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	6 Jan 202321:23	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Change 5.3.2 Fix Pack 04 and earlier versions.	11 Oct 202208:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Jan 202313:46	–	ibm

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-8mpp-f3f7-xc28
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-2191
ubuntu	www.ubuntu.com/security/CVE-2022-2191
osv	www.osv.dev/vulnerability/CVE-2022-2191
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2022-2191
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-2191
bdu	www.bdu.fstec.ru/vul/2023-05665
osv	www.osv.dev/vulnerability/GHSA-8mpp-f3f7-xc28
cve	www.cve.org/CVERecord
github	www.github.com/eclipse/jetty.project

23 Sep 2022 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 25 - 7.8

CVSS 3.17.5 - 9.8

EPSS0.01719