PT-2024-37856 · Jetty +2 · Jetty +2

🗓️ 14 Oct 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Jetty PushSessionCacheFilter allows unauthenticated DoS attacks exhausting server memory resources.

Reporter	Title	Published	Views	Family All 354
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	9 Jan 202510:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Eclipse Jetty, IBM App Connect Professional is vulnerable to bypass security restrictions	10 Jan 202508:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of jetty-server IBM webMethods BPM is vulnerable to corrupted and/or inadvertent sharing of data between requests	12 Nov 202509:50	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to an open redirect attack due to the Eclipse Jetty package (CVE-2024-6763)	6 Oct 202521:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable due to Eclipse Jetty (CVE-2024-9823)	1 Apr 202503:36	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Service Tester contains vulnerabilities which could affect Eclipse Jetty	25 Feb 202518:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm

Source	Link
github	www.github.com/jetty/jetty.project/pull/10756
github	www.github.com/jetty/jetty.project/pull/9716
github	www.github.com/jetty/jetty.project/pull/9715
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-r7m4-f9h5-gr79
github	www.github.com/jetty/jetty.project/pull/10755
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-6762
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/DSA-5894-1
osv	www.osv.dev/vulnerability/DLA-4106-1

30 Jun 2025 00:00Current

6Medium risk

Vulners AI Score6

CVSS 26.8

CVSS 3.17.2 - 7.5

EPSS0.01189

SSVC