PT-2023-9272 · Eclipse +4 · Eclipse Jetty +4

🗓️ 14 Sep 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Vulnerability in Eclipse Jetty CGI servlet allows remote code execution when a binary name contains quotes.

Reporter	Title	Published	Views	Family All 3976
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining CVE-2024-22201	29 Mar 202410:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability found in zlib fixed in the zlib version shipped with IBM Security Verify for Gateway (RADIUS & WinLogin) and for Bridge (DirSync)	8 Dec 202216:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Secure External Authentication Server is vulnerable to multiple issues due to Eclipse Jetty	29 Jul 202217:36	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in HTTP/2 protocol used by Netty on IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-44487)	5 Apr 202415:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Zookeeper affecting IBM QRadar User Behavior Analytics (CVE-2022-2191, CVE-2022-2047, CVE-2022-2048, CVE-2022-24823, CVE-2020-36518)	29 Sep 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to issues in Eclipse (CVE-2023-4218, CVE-2023-44487)	29 Feb 202421:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining . CVE-2022-2047	1 Feb 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for October 2023	26 Mar 202504:03	–	ibm

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-3gh6-v5v9-6v9j
github	www.github.com/bcdannyboy/CVE-2023-44487
github	www.github.com/imabee101/CVE-2023-44487
github	www.github.com/studiogangster/CVE-2023-44487
github	www.github.com/nxenon/cve-2023-44487
github	www.github.com/ColdFusionX/CVE-2021-34429
github	www.github.com/eclipse/jetty.project/pull/9516
github	www.github.com/eclipse/jetty.project/pull/9888
github	www.github.com/eclipse/jetty.project/pull/9889
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/703128

26 Nov 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14.3 - 9.8

CVSS 25

EPSS0.99999

SSVC