389 lines
20 KiB
JSON
389 lines
20 KiB
JSON
{
|
|
"containers": {
|
|
"cna": {
|
|
"affected": [
|
|
{
|
|
"product": "n/a",
|
|
"vendor": "n/a",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "n/a"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"datePublic": "2017-06-16T00:00:00.000Z",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords."
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"description": "n/a",
|
|
"lang": "en",
|
|
"type": "text"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"dateUpdated": "2021-07-20T22:53:10.000Z",
|
|
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
|
|
"shortName": "mitre"
|
|
},
|
|
"references": [
|
|
{
|
|
"name": "99104",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_BID"
|
|
],
|
|
"url": "http://www.securityfocus.com/bid/99104"
|
|
},
|
|
{
|
|
"name": "[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[activemq-issues] 20190820 [jira] [Created] (AMQ-7279) Security Vulnerabilities in Libraries - jackson-databind-2.9.8.jar, tomcat-servlet-api-8.0.53.jar, tomcat-websocket-api-8.0.53.jar, zookeeper-3.4.6.jar, guava-18.0.jar, jetty-all-9.2.26.v20180806.jar, scala-library-2.11.0.jar",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[hadoop-common-dev] 20191030 [jira] [Created] (HADOOP-16676) Security Vulnerability for dependency jetty-xml -please upgrade",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559%40%3Ccommon-dev.hadoop.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[hadoop-common-issues] 20191030 [jira] [Created] (HADOOP-16676) Security Vulnerability for dependency jetty-xml -please upgrade",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://bugs.debian.org/864631"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/eclipse/jetty.project/issues/1556"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20210514 [SECURITY] [DLA 2661-1] jetty9 security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
|
|
}
|
|
],
|
|
"x_legacyV4Record": {
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2017-9735",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "99104",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/99104"
|
|
},
|
|
{
|
|
"name": "[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[activemq-issues] 20190820 [jira] [Created] (AMQ-7279) Security Vulnerabilities in Libraries - jackson-databind-2.9.8.jar, tomcat-servlet-api-8.0.53.jar, tomcat-websocket-api-8.0.53.jar, zookeeper-3.4.6.jar, guava-18.0.jar, jetty-all-9.2.26.v20180806.jar, scala-library-2.11.0.jar",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[hadoop-common-dev] 20191030 [jira] [Created] (HADOOP-16676) Security Vulnerability for dependency jetty-xml -please upgrade",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559@%3Ccommon-dev.hadoop.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[hadoop-common-issues] 20191030 [jira] [Created] (HADOOP-16676) Security Vulnerability for dependency jetty-xml -please upgrade",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a@%3Ccommon-issues.hadoop.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
|
|
"refsource": "MISC",
|
|
"url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
|
|
},
|
|
{
|
|
"name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
|
|
"refsource": "MISC",
|
|
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
|
|
},
|
|
{
|
|
"name": "https://bugs.debian.org/864631",
|
|
"refsource": "MISC",
|
|
"url": "https://bugs.debian.org/864631"
|
|
},
|
|
{
|
|
"name": "https://github.com/eclipse/jetty.project/issues/1556",
|
|
"refsource": "MISC",
|
|
"url": "https://github.com/eclipse/jetty.project/issues/1556"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20210514 [SECURITY] [DLA 2661-1] jetty9 security update",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html"
|
|
},
|
|
{
|
|
"name": "https://www.oracle.com//security-alerts/cpujul2021.html",
|
|
"refsource": "MISC",
|
|
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"providerMetadata": {
|
|
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"shortName": "CVE",
|
|
"dateUpdated": "2024-08-05T17:18:01.294Z"
|
|
},
|
|
"title": "CVE Program Container",
|
|
"references": [
|
|
{
|
|
"name": "99104",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_BID",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.securityfocus.com/bid/99104"
|
|
},
|
|
{
|
|
"name": "[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[activemq-issues] 20190820 [jira] [Created] (AMQ-7279) Security Vulnerabilities in Libraries - jackson-databind-2.9.8.jar, tomcat-servlet-api-8.0.53.jar, tomcat-websocket-api-8.0.53.jar, zookeeper-3.4.6.jar, guava-18.0.jar, jetty-all-9.2.26.v20180806.jar, scala-library-2.11.0.jar",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[hadoop-common-dev] 20191030 [jira] [Created] (HADOOP-16676) Security Vulnerability for dependency jetty-xml -please upgrade",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559%40%3Ccommon-dev.hadoop.apache.org%3E"
|
|
},
|
|
{
|
|
"name": "[hadoop-common-issues] 20191030 [jira] [Created] (HADOOP-16676) Security Vulnerability for dependency jetty-xml -please upgrade",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://bugs.debian.org/864631"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://github.com/eclipse/jetty.project/issues/1556"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20210514 [SECURITY] [DLA 2661-1] jetty9 security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"cveMetadata": {
|
|
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
|
|
"assignerShortName": "mitre",
|
|
"cveId": "CVE-2017-9735",
|
|
"datePublished": "2017-06-16T21:00:00.000Z",
|
|
"dateReserved": "2017-06-16T00:00:00.000Z",
|
|
"dateUpdated": "2024-08-05T17:18:01.294Z",
|
|
"state": "PUBLISHED"
|
|
},
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.1"
|
|
} |