요약
- CVE-2019-10246은(는) org.eclipse.jetty:jetty-server, jetty (eclipse), oncommand system manager (netapp)에 영향을 주는 보통 (CVSS 5.3) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 4.1%, 전체 취약점의 90.7%보다 높음.
- 조치: 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 이상으로 업데이트하세요.
Description
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
NVD description
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
org.eclipse.jetty:jetty-server의 다른 취약점
모두 보기 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free