Lucene search
Redhat.comRH:CVE-2023-26049HistoryAug 31, 2023 - 1:30 a.m.
CVE-2023-26049
2023-08-3101:30:18
redhat.com
access.redhat.com
29
cve-2023-26049
nonstandard cookie parsing
jetty
attack
smuggling
cookies
tampering
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
46.0%
A flaw was found in the jetty-server package. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies or otherwise perform unintended behavior by tampering with the cookie parsing mechanism.
Related
ibm
ibm
osv
osv
CVE-2023-26049
2023-04-18 21:15:09
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
2023-04-18 22:19:57
CGA-6jj8-gqq9-qj3c
2024-06-06 12:24:36
cve
cve
CVE-2023-26049
2023-04-18 21:15:09
veracode
veracode
Information Disclosure
2023-04-24 04:51:24
nessus
nessus
Oracle Coherence (Jul 2023 CPU)
2023-07-24 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jetty-minimal (SUSE-SU-2023:2539-1)
2023-06-20 00:00:00
RHEL 9 : log4j (Unpatched Vulnerability)
2024-06-03 00:00:00
cgr
cgr
CVE-2023-26049 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2023-26049
2023-04-18 00:00:00
githubexploit
githubexploit
prion
prion
Design/Logic Flaw
2023-04-18 21:15:00
cvelist
cvelist
github
github
debiancve
debiancve
CVE-2023-26049
2023-04-18 21:15:09
nvd
nvd
CVE-2023-26049
2023-04-18 21:15:09
wolfi
wolfi
CVE-2023-26049 vulnerabilities
2024-10-01 21:13:23
openvas
openvas
Eclipse Jetty Multiple Vulnerabilities (GHSA-qw69-rqj8-6qw8, GHSA-p26g-97m4-6q7c) - Linux
2023-04-21 00:00:00
Eclipse Jetty Multiple Vulnerabilities (GHSA-qw69-rqj8-6qw8, GHSA-p26g-97m4-6q7c) - Windows
2023-04-21 00:00:00
Debian: Security Advisory (DLA-3592-1)
2023-10-02 00:00:00
redos
redos
ROS-20240729-10
2024-07-29 00:00:00
redhat
redhat
debian
debian
[SECURITY] [DLA 3592-1] jetty9 security update
2023-09-30 12:35:53
[SECURITY] [DSA 5507-1] jetty9 security update
2023-09-28 22:37:26
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
46.0%
Related for RH:CVE-2023-26049