Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploit9A68A65E-1A3C-5F85-BC5B-D3B9AF89FD8F
HistoryNov 03, 2021 - 9:13 a.m.

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Eclipse Jetty

2021-11-0309:13:12
594
eclipse jetty
sensitive file disclosure
encoded uris
cwe-693
security advisory

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

0.473

Percentile

97.5%

JSON

CVE-2021-34429

POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 S…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

exploitdb 1
veracode 1
cnvd 1
openvas 5
zdt 1
hackerone 1
suse 1
github 2
cve 1
osv 3
prion 1
nuclei 1
packetstorm 1
ubuntucve 1
nessus 5
redhatcve 1
metasploit 1
debiancve 1
cvelist 1
nvd 1
ibm 18
redhat 2
oracle 5
exploitdb
exploitdb
Eclipse Jetty 11.0.5 - Sensitive File Disclosure
2021-11-03 00:00:00
veracode
veracode
Information Disclosure
2021-07-16 06:32:49
cnvd
cnvd
Eclipse Jetty has an arbitrary file download vulnerability
2021-07-19 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:2838-1)
2021-08-26 00:00:00
openSUSE: Security Advisory for jetty-minimal (openSUSE-SU-2021:2838-1)
2021-08-26 00:00:00
Eclipse Jetty Information Disclosure Vulnerability (GHSA-vjv5-gp2w-65vm) - Windows
2021-07-16 00:00:00
zdt
zdt
Eclipse Jetty 11.0.5 - Sensitive File Disclosure Vulnerability
2021-11-03 00:00:00
hackerone
hackerone
Glassdoor: web.xml configuration file disclosure
2020-03-11 15:26:52
suse
suse
Security update for jetty-minimal (moderate)
2021-08-25 00:00:00
github
github
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
Encoded URIs can access WEB-INF directory in Eclipse Jetty
2021-07-19 15:15:24
cve
cve
CVE-2021-34429
2021-07-15 17:15:08
osv
osv
Encoded URIs can access WEB-INF directory in Eclipse Jetty
2021-07-19 15:15:24
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
CVE-2021-34429
2021-07-15 17:15:08
prion
prion
Security feature bypass
2021-07-15 17:15:00
nuclei
nuclei
Eclipse Jetty - Information Disclosure
2021-07-22 09:53:19
packetstorm
packetstorm
Jetty WEB-INF File Disclosure
2024-08-31 00:00:00
ubuntucve
ubuntucve
CVE-2021-34429
2021-07-15 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : jetty-minimal (SUSE-SU-2021:2838-1)
2021-08-26 00:00:00
openSUSE 15 Security Update : jetty-minimal (openSUSE-SU-2021:2838-1)
2021-08-26 00:00:00
Oracle Business Process Management Suite (Jul 2023 CPU)
2023-07-20 00:00:00
redhatcve
redhatcve
CVE-2021-34429
2021-07-23 08:20:14
metasploit
metasploit
Jetty WEB-INF File Disclosure
2021-11-08 19:04:08
debiancve
debiancve
CVE-2021-34429
2021-07-15 17:15:08
cvelist
cvelist
CVE-2021-34429
2021-07-15 17:00:10
nvd
nvd
CVE-2021-34429
2021-07-15 17:15:08
ibm
ibm
Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues due to Eclipse Jetty
2022-07-29 17:38:25
Security Bulletin: IBM MQ is vulnerable to multiple Jetty vulnerabilities (CVE-2021-34428, CVE-2021-34429, CVE-2021-28169)
2021-12-17 17:19:13
Security Bulletin: IBM Sterling B2B Integrator vulnerable due to Eclipse Jetty
2022-10-17 13:12:51
redhat
redhat
(RHSA-2022:0138) Moderate: Red Hat AMQ Streams 2.0.0 release and security update
2022-01-13 08:24:32
(RHSA-2021:3700) Moderate: Red Hat AMQ Broker 7.9.0 release and security update
2021-09-30 09:53:41
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

0.473

Percentile

97.5%

JSON
Related for 9A68A65E-1A3C-5F85-BC5B-D3B9AF89FD8F
exploitdb1veracode1cnvd1openvas5zdt1hackerone1suse1github2cve1osv3prion1nuclei1packetstorm1ubuntucve1nessus5redhatcve1metasploit1debiancve1cvelist1nvd1ibm18redhat2oracle5