Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-FVH3-4V5R-CVVC
HistoryMay 01, 2022 - 6:35 p.m.

Improper Authentication in Mortbay Jetty

2022-05-0118:35:01
CWE-287
GitHub Advisory Database
github.com
14
mortbay jetty
improper authentication
browser sessions

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.03

Percentile

91.1%

JSON

Mortbay Jetty before 6.1.6rc1 does not properly handle “certain quote sequences” in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

Affected configurations

Vulners
Node
org.mortbay.jettyjettyRange<6.1.6
VendorProductVersionCPE
org.mortbay.jettyjetty*cpe:2.3:a:org.mortbay.jetty:jetty:*:*:*:*:*:*:*:*

Related

cvelist 1
cve 1
redhatcve 1
osv 1
prion 1
veracode 1
nvd 1
cert 1
openvas 6
fedora 2
freebsd 1
nessus 3
cvelist
cvelist
CVE-2007-5614
2007-12-05 11:00:00
cve
cve
CVE-2007-5614
2007-12-05 11:46:00
redhatcve
redhatcve
CVE-2007-5614
2019-10-04 21:10:06
osv
osv
Improper Authentication in Mortbay Jetty
2022-05-01 18:35:01
prion
prion
Hardcoded credentials
2007-12-05 11:46:00
veracode
veracode
Session Hijacking
2018-11-15 01:29:46
nvd
nvd
CVE-2007-5614
2007-12-05 11:46:00
cert
cert
Mortbay Jetty fails to properly handle cookies with quotes
2007-12-04 00:00:00
openvas
openvas
Fedora Update for jetty FEDORA-2008-6141
2009-02-17 00:00:00
Fedora Update for jetty FEDORA-2008-6164
2009-02-17 00:00:00
FreeBSD Ports: jetty
2008-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: jetty-5.1.14-1jpp.2.fc9
2008-07-06 06:16:00
[SECURITY] Fedora 8 Update: jetty-5.1.14-1jpp.1.fc8
2008-07-06 06:17:49
freebsd
freebsd
jetty -- multiple vulnerabilities
2007-12-05 00:00:00
nessus
nessus
FreeBSD : jetty -- multiple vulnerabilities (6ae7cef2-a6ae-11dc-95e6-000c29c5647f)
2007-12-11 00:00:00
Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)
2008-07-08 00:00:00
Fedora 8 : jetty-5.1.14-1jpp.1.fc8 (2008-6164)
2008-07-08 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.03

Percentile

91.1%

JSON
Related for GHSA-FVH3-4V5R-CVVC
cvelist1cve1redhatcve1osv1prion1veracode1nvd1cert1openvas6fedora2freebsd1nessus3