Lucene search

CVE-2023-40167

🗓️ 15 Sep 2023 00:00:00Reported by ubuntu.comType

Jetty web server <=12.0.1 HTTP request smuggling vulnerabilit

Reporter	Title	Published	Views	Family All 99
Amazon	Medium: jetty	15 Feb 202403:52	–	amazon
IBM Security Bulletins	Security Bulletin: Vulnerability in jetty-http affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2023-40167].	9 Feb 202408:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jetty-http affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-40167]	5 Mar 202411:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to HTTP request smuggling (CVE-2023-40167)	15 Mar 202406:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Solr affects IBM Operations Analytics - Log Analysis (CVE-2023-40167)	15 Mar 202417:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jetty-http-9.4.51.v20230217.jar affects IBM Integrated Analytics System (Sailfish) [CVE-2023-40167]	31 Oct 202311:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager October 2023 - Multiple CVEs addressed	19 Oct 202311:13	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jetty-http-9.4.51.v20230217.jar used by IBM Maximo Asset Management application (CVE-2023-40167 and CVE-2023-36478)	17 Jan 202413:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM Process Designer 8.5.7 shipped with IBM Business Automation Workflow	9 Nov 202319:30	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jetty-http-9.4.51.v20230217.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-40167 and CVE-2023-36478)	1 Feb 202413:44	–	ibm

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40167
launchpad	www.launchpad.net/bugs/cve/CVE-2023-40167
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-40167

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	jetty9	any	UNKNOWN
ubuntu	20.04	noarch	jetty9	any	UNKNOWN
ubuntu	22.04	noarch	jetty9	any	UNKNOWN
ubuntu	24.04	noarch	jetty9	any	UNKNOWN
ubuntu	16.04	noarch	jetty9	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Sep 2023 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.3

EPSS0.001