org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc6), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc6) +32 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.rc6)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc6 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc6 - org.eclipse.jetty.aggregate:jetty-all-server...

com.yammer.dropwizard:dropwizard-client (0.1.1), com.yammer.dropwizard:dropwizard-core (0.1.1) +50 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.1 - com.yammer.dropwizard:dropwizard-core 0.1.1 -...

com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x (>=1.0.1, <=1.0.2), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.4.15, <=1.6.7) +39 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 7.6.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x =1.0.1, =1.4.15, =1.6.7 -...

com.github.rest-driver:rest-client-driver (1.1.15), com.proofpoint.discovery:discovery-elb (1.1) +60 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 8.0.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.rest-driver:rest-client-driver 1.1.15 - com.proofpoint.discovery:discovery-elb...

au.com.onegeek:respite-core_2.10 (>=0.0.1, <=0.3.3), com.bazaarvoice.auth:jersey-hmac-auth-sample (>=0.13, <=1.1) +185 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.10.v20130312)

org.eclipse.jetty:jetty-server MAVEN version 8.1.10.v20130312 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - au.com.onegeek:respite-core2.10 =0.0.1, =0.13, =1.3.1, =0.0.11, =0.0.11, =0.1.10, =0.1.0...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc2) +42 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

by.stub:stubby4j (>=1.0.57, <=2.0.22), cn.jants:ants-core (>=1.0, <=1.1.18) +131 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.7.v20120910)

org.eclipse.jetty:jetty-server MAVEN version 8.1.7.v20120910 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - by.stub:stubby4j =1.0.57, =1.0, =1.1, =4.2.1, =4.2.1, =4.2.1, =1.0.0-release, =1.5, =1.5,...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc1) +42 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +29 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.5.2.v20111006), org.eclipse.jetty.aggregate:jetty-all-server (7.5.2.v20111006) +43 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.5.2.v20111006)

org.eclipse.jetty:jetty-server MAVEN version 7.5.2.v20111006 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.2.v20111006 -...

ai.h2o:sparkling-water-core_2.10 (>=0.2.0, <=1.2.6), ai.h2o:sparkling-water-examples_2.10 (>=0.2.3, <=1.2.6) +559 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.14.v20131031)

org.eclipse.jetty:jetty-server MAVEN version 8.1.14.v20131031 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:sparkling-water-core2.10 =0.2.0, =0.2.3, =1.1.0, =0.1, =0.1, =1.1.0-beta2,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

org.cometd.java:cometd-java-examples (2.4.0.rc3), org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc5) +46 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.0.rc5)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-examples 2.4.0.rc3 - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc...

org.apache.camel:camel-cometd (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0) +109 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.5.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1,...

GHSA-WFCC-PFF6-RGC5 Jetty vulnerable to exposure of sensitive information due to observable discrepancy

Jetty through 9.4.x contains a timing channel attack in util/security/Password.java, which allows attackers to obtain access by observing elapsed times before rejection of incorrect passwords...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc0) +45 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-oort (1.0.beta10) +29 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.m4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-oort 1.0.beta10 -...

com.github.rest-driver:rest-client-driver (>=1.1.11, <=1.1.14), io.opentelemetry.javaagent:opentelemetry-testing-common (>=0.15.0, <=1.2.0-alpha) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.v20110901)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.v20110901 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.rest-driver:rest-client-driver =1.1.11, =0.15.0, =1.2.0-alpha -...

org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (1.2.1), org.eclipse.jetty.aggregate:jetty-all (7.6.2.v20120308) +53 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.2.v20120308)

org.eclipse.jetty:jetty-server MAVEN version 7.6.2.v20120308 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer 1.2.1 -...

Jetty vulnerable to exposure of sensitive information due to observable discrepancy

Jetty through 9.4.x contains a timing channel attack in util/security/Password.java, which allows attackers to obtain access by observing elapsed times before rejection of incorrect passwords...