CVE-2016-4800exploração observada

CVE-2016-4800

Publicada em · Atualizada em

25Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Attendepss 6.4%
da publicação à arma
Publicada no NVD13 de abr.
VulnCheck+3385d
probabilidade de exploração
6.4%top 7% das CVEs
exploração observada
simVulnCheck
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
Produtos afetados
n/a · n/a
Referências
http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00092.htmlhttps://security.netapp.com/advisory/ntap-20190307-0006/https://www.oracle.com/security-alerts/cpuoct2020.htmlhttp://www.ocert.org/advisories/ocert-2016-001.htmlhttp://www.securityfocus.com/bid/90945http://www.zerodayinitiative.com/advisories/ZDI-16-362