WID-SEC-W-2024-3176

Vulnerability from csaf_certbund - Published: 2024-10-14 22:00 - Updated: 2026-01-28 23:00
Summary
Eclipse Jetty: Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Eclipse Jetty ist ein Java-HTTP-Server und Java-Servlet-Container.
Angriff: Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff zu erzeugen und Daten zu manipulieren.
Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows
Affected products
Product Identifier Version Remediation
NetApp ActiveIQ Unified Manager for VMware vSphere
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere for VMware vSphere
Red Hat Enterprise Linux
Red Hat
cpe:/o:redhat:enterprise_linux:-
Eclipse Jetty <10.0.18
Eclipse / Jetty
<10.0.18
Eclipse Jetty <11.0.18
Eclipse / Jetty
<11.0.18
Eclipse Jetty <12.0.4
Eclipse / Jetty
<12.0.4
IBM Security Guardium 12
IBM / Security Guardium
cpe:/a:ibm:security_guardium:sqlguard_12.0p35_bundle_jan-28-2025 12
Eclipse Jetty <12.0.3
Eclipse / Jetty
<12.0.3
Hitachi Ops Center
Hitachi
cpe:/a:hitachi:ops_center:-
NetApp ActiveIQ Unified Manager for Microsoft Windows
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows for Microsoft Windows
IBM Operational Decision Manager
IBM / Operational Decision Manager
cpe:/a:ibm:operational_decision_manager:-
Amazon Linux 2
Amazon
cpe:/o:amazon:linux_2:-
SolarWinds Platform <2025.4.1
SolarWinds / Platform
<2025.4.1
IBM Tivoli Network Manager IP Edition <4.2 Fix Pack 23
IBM / Tivoli Network Manager
IP Edition <4.2 Fix Pack 23
IBM SPSS Collaboration and Deployment Services 8.5
IBM / SPSS
cpe:/a:ibm:spss:collaboration_and_deployment_services_8.5 Collaboration and Deployment Services 8.5
NetApp ActiveIQ Unified Manager for Linux
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_linux for Linux
IBM Installation Manager 1.4-1.10.1.0
IBM / Installation Manager
cpe:/a:ibm:installation_manager:1.4_-_1.10.1.0 1.4-1.10.1.0
Debian Linux
Debian
cpe:/o:debian:debian_linux:-
SUSE Linux
SUSE
cpe:/o:suse:suse_linux:-
IBM QRadar SIEM <7.5.0 UP11 IF01
IBM / QRadar SIEM
<7.5.0 UP11 IF01
IBM InfoSphere Information Server 11.7
IBM / InfoSphere Information Server
cpe:/a:ibm:infosphere_information_server:11.7 11.7
IBM Business Automation Workflow
IBM
cpe:/a:ibm:business_automation_workflow:-
SUSE openSUSE
SUSE
cpe:/o:suse:opensuse:-
IBM Operational Decision Manager <V8.11.0.1 Interim fix 042
IBM / Operational Decision Manager
<V8.11.0.1 Interim fix 042
IBM Operational Decision Manager <V8.11.1.0: Interim fix 039
IBM / Operational Decision Manager
<V8.11.1.0: Interim fix 039
IBM Operational Decision Manager <V8.12.0.1: Interim fix 024
IBM / Operational Decision Manager
<V8.12.0.1: Interim fix 024
Red Hat JBoss A-MQ Streams 2
Red Hat / JBoss A-MQ
cpe:/a:redhat:jboss_amq:streams_2 Streams 2
IBM Operational Decision Manager <V9.0.0.1: Interim fix 007
IBM / Operational Decision Manager
<V9.0.0.1: Interim fix 007
Affected products
Product Identifier Version Remediation
NetApp ActiveIQ Unified Manager for VMware vSphere
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere for VMware vSphere
Red Hat Enterprise Linux
Red Hat
cpe:/o:redhat:enterprise_linux:-
Eclipse Jetty <12.0.4
Eclipse / Jetty
<12.0.4
IBM Security Guardium 12
IBM / Security Guardium
cpe:/a:ibm:security_guardium:sqlguard_12.0p35_bundle_jan-28-2025 12
Eclipse Jetty <12.0.12
Eclipse / Jetty
<12.0.12
Eclipse Jetty <12.0.3
Eclipse / Jetty
<12.0.3
Hitachi Ops Center
Hitachi
cpe:/a:hitachi:ops_center:-
NetApp ActiveIQ Unified Manager for Microsoft Windows
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows for Microsoft Windows
IBM Operational Decision Manager
IBM / Operational Decision Manager
cpe:/a:ibm:operational_decision_manager:-
Amazon Linux 2
Amazon
cpe:/o:amazon:linux_2:-
SolarWinds Platform <2025.4.1
SolarWinds / Platform
<2025.4.1
IBM Tivoli Network Manager IP Edition <4.2 Fix Pack 23
IBM / Tivoli Network Manager
IP Edition <4.2 Fix Pack 23
Eclipse Jetty <12.0.9
Eclipse / Jetty
<12.0.9
IBM SPSS Collaboration and Deployment Services 8.5
IBM / SPSS
cpe:/a:ibm:spss:collaboration_and_deployment_services_8.5 Collaboration and Deployment Services 8.5
NetApp ActiveIQ Unified Manager for Linux
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_linux for Linux
IBM Installation Manager 1.4-1.10.1.0
IBM / Installation Manager
cpe:/a:ibm:installation_manager:1.4_-_1.10.1.0 1.4-1.10.1.0
Debian Linux
Debian
cpe:/o:debian:debian_linux:-
SUSE Linux
SUSE
cpe:/o:suse:suse_linux:-
IBM QRadar SIEM <7.5.0 UP11 IF01
IBM / QRadar SIEM
<7.5.0 UP11 IF01
IBM InfoSphere Information Server 11.7
IBM / InfoSphere Information Server
cpe:/a:ibm:infosphere_information_server:11.7 11.7
IBM Business Automation Workflow
IBM
cpe:/a:ibm:business_automation_workflow:-
SUSE openSUSE
SUSE
cpe:/o:suse:opensuse:-
IBM Operational Decision Manager <V8.11.0.1 Interim fix 042
IBM / Operational Decision Manager
<V8.11.0.1 Interim fix 042
IBM Operational Decision Manager <V8.11.1.0: Interim fix 039
IBM / Operational Decision Manager
<V8.11.1.0: Interim fix 039
IBM Operational Decision Manager <V8.12.0.1: Interim fix 024
IBM / Operational Decision Manager
<V8.12.0.1: Interim fix 024
Red Hat JBoss A-MQ Streams 2
Red Hat / JBoss A-MQ
cpe:/a:redhat:jboss_amq:streams_2 Streams 2
IBM Operational Decision Manager <V9.0.0.1: Interim fix 007
IBM / Operational Decision Manager
<V9.0.0.1: Interim fix 007
Affected products
Product Identifier Version Remediation
NetApp ActiveIQ Unified Manager for VMware vSphere
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere for VMware vSphere
Red Hat Enterprise Linux
Red Hat
cpe:/o:redhat:enterprise_linux:-
Eclipse Jetty <10.0.18
Eclipse / Jetty
<10.0.18
Eclipse Jetty <11.0.18
Eclipse / Jetty
<11.0.18
Eclipse Jetty <12.0.4
Eclipse / Jetty
<12.0.4
IBM Security Guardium 12
IBM / Security Guardium
cpe:/a:ibm:security_guardium:sqlguard_12.0p35_bundle_jan-28-2025 12
Eclipse Jetty <11.0.24
Eclipse / Jetty
<11.0.24
Eclipse Jetty <9.4.56
Eclipse / Jetty
<9.4.56
Eclipse Jetty <12.0.3
Eclipse / Jetty
<12.0.3
Hitachi Ops Center
Hitachi
cpe:/a:hitachi:ops_center:-
Eclipse Jetty <9.4.54
Eclipse / Jetty
<9.4.54
NetApp ActiveIQ Unified Manager for Microsoft Windows
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows for Microsoft Windows
IBM Operational Decision Manager
IBM / Operational Decision Manager
cpe:/a:ibm:operational_decision_manager:-
Amazon Linux 2
Amazon
cpe:/o:amazon:linux_2:-
SolarWinds Platform <2025.4.1
SolarWinds / Platform
<2025.4.1
IBM Tivoli Network Manager IP Edition <4.2 Fix Pack 23
IBM / Tivoli Network Manager
IP Edition <4.2 Fix Pack 23
Eclipse Jetty <12.0.9
Eclipse / Jetty
<12.0.9
Eclipse Jetty <10.0.24
Eclipse / Jetty
<10.0.24
IBM SPSS Collaboration and Deployment Services 8.5
IBM / SPSS
cpe:/a:ibm:spss:collaboration_and_deployment_services_8.5 Collaboration and Deployment Services 8.5
NetApp ActiveIQ Unified Manager for Linux
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_linux for Linux
IBM Installation Manager 1.4-1.10.1.0
IBM / Installation Manager
cpe:/a:ibm:installation_manager:1.4_-_1.10.1.0 1.4-1.10.1.0
Debian Linux
Debian
cpe:/o:debian:debian_linux:-
SUSE Linux
SUSE
cpe:/o:suse:suse_linux:-
IBM QRadar SIEM <7.5.0 UP11 IF01
IBM / QRadar SIEM
<7.5.0 UP11 IF01
IBM InfoSphere Information Server 11.7
IBM / InfoSphere Information Server
cpe:/a:ibm:infosphere_information_server:11.7 11.7
IBM Business Automation Workflow
IBM
cpe:/a:ibm:business_automation_workflow:-
SUSE openSUSE
SUSE
cpe:/o:suse:opensuse:-
IBM Operational Decision Manager <V8.11.0.1 Interim fix 042
IBM / Operational Decision Manager
<V8.11.0.1 Interim fix 042
IBM Operational Decision Manager <V8.11.1.0: Interim fix 039
IBM / Operational Decision Manager
<V8.11.1.0: Interim fix 039
IBM Operational Decision Manager <V8.12.0.1: Interim fix 024
IBM / Operational Decision Manager
<V8.12.0.1: Interim fix 024
Red Hat JBoss A-MQ Streams 2
Red Hat / JBoss A-MQ
cpe:/a:redhat:jboss_amq:streams_2 Streams 2
IBM Operational Decision Manager <V9.0.0.1: Interim fix 007
IBM / Operational Decision Manager
<V9.0.0.1: Interim fix 007
Affected products
Product Identifier Version Remediation
NetApp ActiveIQ Unified Manager for VMware vSphere
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere for VMware vSphere
Red Hat Enterprise Linux
Red Hat
cpe:/o:redhat:enterprise_linux:-
Eclipse Jetty <10.0.18
Eclipse / Jetty
<10.0.18
Eclipse Jetty <11.0.18
Eclipse / Jetty
<11.0.18
IBM Security Guardium 12
IBM / Security Guardium
cpe:/a:ibm:security_guardium:sqlguard_12.0p35_bundle_jan-28-2025 12
Hitachi Ops Center
Hitachi
cpe:/a:hitachi:ops_center:-
Eclipse Jetty <12.0.3
Eclipse / Jetty
<12.0.3
Eclipse Jetty <9.4.54
Eclipse / Jetty
<9.4.54
NetApp ActiveIQ Unified Manager for Microsoft Windows
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows for Microsoft Windows
IBM Operational Decision Manager
IBM / Operational Decision Manager
cpe:/a:ibm:operational_decision_manager:-
Amazon Linux 2
Amazon
cpe:/o:amazon:linux_2:-
SolarWinds Platform <2025.4.1
SolarWinds / Platform
<2025.4.1
IBM Tivoli Network Manager IP Edition <4.2 Fix Pack 23
IBM / Tivoli Network Manager
IP Edition <4.2 Fix Pack 23
IBM SPSS Collaboration and Deployment Services 8.5
IBM / SPSS
cpe:/a:ibm:spss:collaboration_and_deployment_services_8.5 Collaboration and Deployment Services 8.5
NetApp ActiveIQ Unified Manager for Linux
NetApp / ActiveIQ Unified Manager
cpe:/a:netapp:active_iq_unified_manager:for_linux for Linux
IBM Installation Manager 1.4-1.10.1.0
IBM / Installation Manager
cpe:/a:ibm:installation_manager:1.4_-_1.10.1.0 1.4-1.10.1.0
Debian Linux
Debian
cpe:/o:debian:debian_linux:-
SUSE Linux
SUSE
cpe:/o:suse:suse_linux:-
IBM QRadar SIEM <7.5.0 UP11 IF01
IBM / QRadar SIEM
<7.5.0 UP11 IF01
IBM InfoSphere Information Server 11.7
IBM / InfoSphere Information Server
cpe:/a:ibm:infosphere_information_server:11.7 11.7
IBM Business Automation Workflow
IBM
cpe:/a:ibm:business_automation_workflow:-
SUSE openSUSE
SUSE
cpe:/o:suse:opensuse:-
IBM Operational Decision Manager <V8.11.0.1 Interim fix 042
IBM / Operational Decision Manager
<V8.11.0.1 Interim fix 042
IBM Operational Decision Manager <V8.11.1.0: Interim fix 039
IBM / Operational Decision Manager
<V8.11.1.0: Interim fix 039
IBM Operational Decision Manager <V8.12.0.1: Interim fix 024
IBM / Operational Decision Manager
<V8.12.0.1: Interim fix 024
Red Hat JBoss A-MQ Streams 2
Red Hat / JBoss A-MQ
cpe:/a:redhat:jboss_amq:streams_2 Streams 2
IBM Operational Decision Manager <V9.0.0.1: Interim fix 007
IBM / Operational Decision Manager
<V9.0.0.1: Interim fix 007
References
URL Category
https://wid.cert-bund.de/.well-known/csaf/white/2… self
https://wid.cert-bund.de/portal/wid/securityadvis… self
https://www.eclipse.org//lists/jetty-announce/msg… external
https://www.eclipse.org//lists/jetty-announce/msg… external
https://github.com/jetty/jetty.project/security/a… external
https://lists.opensuse.org/archives/list/security… external
https://lists.opensuse.org/archives/list/security… external
https://access.redhat.com/errata/RHSA-2024:9571 external
https://www.ibm.com/support/pages/node/7176904 external
https://access.redhat.com/errata/RHSA-2024:11023 external
https://alas.aws.amazon.com/AL2/ALAS-2024-2702.html external
https://www.ibm.com/support/pages/node/7183584 external
https://access.redhat.com/errata/RHSA-2025:2416 external
https://security.netapp.com/advisory/ntap-2025030… external
https://security.netapp.com/advisory/ntap-2025030… external
https://www.ibm.com/support/pages/node/7229444 external
https://lists.debian.org/debian-lts-announce/2025… external
https://lists.debian.org/debian-security-announce… external
https://www.ibm.com/support/pages/node/7231640 external
https://www.ibm.com/support/pages/node/7232032 external
https://www.ibm.com/support/pages/node/7234827 external
https://lists.opensuse.org/archives/list/security… external
https://lists.opensuse.org/archives/list/security… external
https://access.redhat.com/errata/RHSA-2025:9922 external
https://access.redhat.com/errata/RHSA-2025:12511 external
https://www.ibm.com/support/pages/node/7241577 external
https://www.ibm.com/support/pages/node/7243781 external
https://www.hitachi.com/products/it/software/secu… external
https://documentation.solarwinds.com/en/success_c… external
https://www.ibm.com/support/pages/node/7258317 external

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Eclipse Jetty ist ein Java-HTTP-Server und Java-Servlet-Container.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff zu erzeugen und Daten zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3176 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3176.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3176 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3176"
      },
      {
        "category": "external",
        "summary": "Jetty Advisory vom 2024-10-14",
        "url": "https://www.eclipse.org//lists/jetty-announce/msg00193.html"
      },
      {
        "category": "external",
        "summary": "Jetty Advisory vom 2024-10-14",
        "url": "https://www.eclipse.org//lists/jetty-announce/msg00194.html"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory vom 2024-10-14",
        "url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3720-1 vom 2024-10-18",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/O3QVMQNMY7KSISCQZHRID4KVIGDCRX47/"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2024:14408-1 vom 2024-10-19",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BNU3R7DW4USCKK4UHDLFZ57HXWYZNOCE/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:9571 vom 2024-11-13",
        "url": "https://access.redhat.com/errata/RHSA-2024:9571"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7176904 vom 2024-12-06",
        "url": "https://www.ibm.com/support/pages/node/7176904"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:11023 vom 2024-12-12",
        "url": "https://access.redhat.com/errata/RHSA-2024:11023"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2024-2702 vom 2024-12-20",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2702.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7183584 vom 2025-02-18",
        "url": "https://www.ibm.com/support/pages/node/7183584"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:2416 vom 2025-03-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:2416"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20250306-0006 vom 2025-03-06",
        "url": "https://security.netapp.com/advisory/ntap-20250306-0006/"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20250306-0005 vom 2025-03-06",
        "url": "https://security.netapp.com/advisory/ntap-20250306-0005/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7229444 vom 2025-03-28",
        "url": "https://www.ibm.com/support/pages/node/7229444"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4106 vom 2025-04-02",
        "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00001.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5894 vom 2025-04-05",
        "url": "https://lists.debian.org/debian-security-announce/2025/msg00056.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7231640 vom 2025-04-23",
        "url": "https://www.ibm.com/support/pages/node/7231640"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7232032 vom 2025-04-29",
        "url": "https://www.ibm.com/support/pages/node/7232032"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin",
        "url": "https://www.ibm.com/support/pages/node/7234827"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:15160-1 vom 2025-05-27",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YHGGC7B6PWN2UBH367C4SXP6PWNDYAXM/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:01738-1 vom 2025-05-29",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/4ULIFKC3HN46CWW5I3UU5DGUJKMLM6UC/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:9922 vom 2025-06-30",
        "url": "https://access.redhat.com/errata/RHSA-2025:9922"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12511 vom 2025-08-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:12511"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7241577 vom 2025-08-06",
        "url": "https://www.ibm.com/support/pages/node/7241577"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7243781 vom 2025-09-02",
        "url": "https://www.ibm.com/support/pages/node/7243781"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2025-126 vom 2025-09-30",
        "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-126/index.html"
      },
      {
        "category": "external",
        "summary": "SolarWinds Platform 2025.4.1 release notes vom 2025-11-18",
        "url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-4-1_release_notes.htm"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7258317 vom 2026-01-29",
        "url": "https://www.ibm.com/support/pages/node/7258317"
      }
    ],
    "source_lang": "en-US",
    "title": "Eclipse Jetty: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-01-28T23:00:00.000+00:00",
      "generator": {
        "date": "2026-01-29T08:32:11.049+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2024-3176",
      "initial_release_date": "2024-10-14T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-10-14T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-10-17T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-10-20T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von openSUSE aufgenommen"
        },
        {
          "date": "2024-11-13T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-12-05T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-12-12T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-12-19T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-02-18T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-03-05T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-03-06T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2025-03-30T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-04-01T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2025-04-06T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2025-04-23T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-04-28T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-05-27T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von IBM und openSUSE aufgenommen"
        },
        {
          "date": "2025-05-29T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-06-30T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-08-03T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-08-06T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-09-02T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-09-29T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von HITACHI aufgenommen"
        },
        {
          "date": "2025-11-17T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2026-01-28T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "24"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c12.0.9",
                "product": {
                  "name": "Eclipse Jetty \u003c12.0.9",
                  "product_id": "T038318"
                }
              },
              {
                "category": "product_version",
                "name": "12.0.9",
                "product": {
                  "name": "Eclipse Jetty 12.0.9",
                  "product_id": "T038318-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:12.0.9"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.0.24",
                "product": {
                  "name": "Eclipse Jetty \u003c10.0.24",
                  "product_id": "T038319"
                }
              },
              {
                "category": "product_version",
                "name": "10.0.24",
                "product": {
                  "name": "Eclipse Jetty 10.0.24",
                  "product_id": "T038319-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:10.0.24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c11.0.24",
                "product": {
                  "name": "Eclipse Jetty \u003c11.0.24",
                  "product_id": "T038320"
                }
              },
              {
                "category": "product_version",
                "name": "11.0.24",
                "product": {
                  "name": "Eclipse Jetty 11.0.24",
                  "product_id": "T038320-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:11.0.24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.4.56",
                "product": {
                  "name": "Eclipse Jetty \u003c9.4.56",
                  "product_id": "T038321"
                }
              },
              {
                "category": "product_version",
                "name": "9.4.56",
                "product": {
                  "name": "Eclipse Jetty 9.4.56",
                  "product_id": "T038321-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:9.4.56"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.0.3",
                "product": {
                  "name": "Eclipse Jetty \u003c12.0.3",
                  "product_id": "T038322"
                }
              },
              {
                "category": "product_version",
                "name": "12.0.3",
                "product": {
                  "name": "Eclipse Jetty 12.0.3",
                  "product_id": "T038322-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:12.0.3"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.4.54",
                "product": {
                  "name": "Eclipse Jetty \u003c9.4.54",
                  "product_id": "T038323"
                }
              },
              {
                "category": "product_version",
                "name": "9.4.54",
                "product": {
                  "name": "Eclipse Jetty 9.4.54",
                  "product_id": "T038323-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:9.4.54"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.0.18",
                "product": {
                  "name": "Eclipse Jetty \u003c10.0.18",
                  "product_id": "T038324"
                }
              },
              {
                "category": "product_version",
                "name": "10.0.18",
                "product": {
                  "name": "Eclipse Jetty 10.0.18",
                  "product_id": "T038324-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:10.0.18"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c11.0.18",
                "product": {
                  "name": "Eclipse Jetty \u003c11.0.18",
                  "product_id": "T038325"
                }
              },
              {
                "category": "product_version",
                "name": "11.0.18",
                "product": {
                  "name": "Eclipse Jetty 11.0.18",
                  "product_id": "T038325-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:11.0.18"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.0.4",
                "product": {
                  "name": "Eclipse Jetty \u003c12.0.4",
                  "product_id": "T038326"
                }
              },
              {
                "category": "product_version",
                "name": "12.0.4",
                "product": {
                  "name": "Eclipse Jetty 12.0.4",
                  "product_id": "T038326-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:12.0.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.0.12",
                "product": {
                  "name": "Eclipse Jetty \u003c12.0.12",
                  "product_id": "T038327"
                }
              },
              {
                "category": "product_version",
                "name": "12.0.12",
                "product": {
                  "name": "Eclipse Jetty 12.0.12",
                  "product_id": "T038327-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:eclipse:jetty:12.0.12"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Jetty"
          }
        ],
        "category": "vendor",
        "name": "Eclipse"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Ops Center",
            "product": {
              "name": "Hitachi Ops Center",
              "product_id": "T038840",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:ops_center:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM Business Automation Workflow",
            "product": {
              "name": "IBM Business Automation Workflow",
              "product_id": "T019704",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:business_automation_workflow:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "11.7",
                "product": {
                  "name": "IBM InfoSphere Information Server 11.7",
                  "product_id": "444803",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:infosphere_information_server:11.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "InfoSphere Information Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.4-1.10.1.0",
                "product": {
                  "name": "IBM Installation Manager 1.4-1.10.1.0",
                  "product_id": "T043115",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:installation_manager:1.4_-_1.10.1.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Installation Manager"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM Operational Decision Manager",
                "product": {
                  "name": "IBM Operational Decision Manager",
                  "product_id": "T005180",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:operational_decision_manager:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV8.11.0.1 Interim fix 042",
                "product": {
                  "name": "IBM Operational Decision Manager \u003cV8.11.0.1 Interim fix 042",
                  "product_id": "T043174"
                }
              },
              {
                "category": "product_version",
                "name": "V8.11.0.1 Interim fix 042",
                "product": {
                  "name": "IBM Operational Decision Manager V8.11.0.1 Interim fix 042",
                  "product_id": "T043174-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:operational_decision_manager:v8.11.0.1_interim_fix_042"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV8.11.1.0: Interim fix 039",
                "product": {
                  "name": "IBM Operational Decision Manager \u003cV8.11.1.0: Interim fix 039",
                  "product_id": "T043175"
                }
              },
              {
                "category": "product_version",
                "name": "V8.11.1.0: Interim fix 039",
                "product": {
                  "name": "IBM Operational Decision Manager V8.11.1.0: Interim fix 039",
                  "product_id": "T043175-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:operational_decision_manager:v8.11.1.0_interim_fix_039"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV8.12.0.1: Interim fix 024",
                "product": {
                  "name": "IBM Operational Decision Manager \u003cV8.12.0.1: Interim fix 024",
                  "product_id": "T043176"
                }
              },
              {
                "category": "product_version",
                "name": "V8.12.0.1: Interim fix 024",
                "product": {
                  "name": "IBM Operational Decision Manager V8.12.0.1: Interim fix 024",
                  "product_id": "T043176-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:operational_decision_manager:v8.12.0.1_interim_fix_024"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV9.0.0.1: Interim fix 007",
                "product": {
                  "name": "IBM Operational Decision Manager \u003cV9.0.0.1: Interim fix 007",
                  "product_id": "T043177"
                }
              },
              {
                "category": "product_version",
                "name": "V9.0.0.1: Interim fix 007",
                "product": {
                  "name": "IBM Operational Decision Manager V9.0.0.1: Interim fix 007",
                  "product_id": "T043177-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:operational_decision_manager:v9.0.0.1_interim_fix_007"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Operational Decision Manager"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP11 IF01",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP11 IF01",
                  "product_id": "T041270"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP11 IF01",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP11 IF01",
                  "product_id": "T041270-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up11_if01"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Collaboration and Deployment Services 8.5",
                "product": {
                  "name": "IBM SPSS Collaboration and Deployment Services 8.5",
                  "product_id": "T038750",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:spss:collaboration_and_deployment_services_8.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SPSS"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "12",
                "product": {
                  "name": "IBM Security Guardium 12",
                  "product_id": "T043916",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_guardium:sqlguard_12.0p35_bundle_jan-28-2025"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Guardium"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "IP Edition \u003c4.2 Fix Pack 23",
                "product": {
                  "name": "IBM Tivoli Network Manager IP Edition \u003c4.2 Fix Pack 23",
                  "product_id": "T046654"
                }
              },
              {
                "category": "product_version",
                "name": "IP Edition  4.2 Fix Pack 23",
                "product": {
                  "name": "IBM Tivoli Network Manager IP Edition  4.2 Fix Pack 23",
                  "product_id": "T046654-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition___4.2_fix_pack_23"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Tivoli Network Manager"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "for Linux",
                "product": {
                  "name": "NetApp ActiveIQ Unified Manager for Linux",
                  "product_id": "T023548",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:active_iq_unified_manager:for_linux"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "for VMware vSphere",
                "product": {
                  "name": "NetApp ActiveIQ Unified Manager for VMware vSphere",
                  "product_id": "T025152",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "for Microsoft Windows",
                "product": {
                  "name": "NetApp ActiveIQ Unified Manager for Microsoft Windows",
                  "product_id": "T025631",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ActiveIQ Unified Manager"
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Streams 2",
                "product": {
                  "name": "Red Hat JBoss A-MQ Streams 2",
                  "product_id": "T041596",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_amq:streams_2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "JBoss A-MQ"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "SUSE openSUSE",
            "product": {
              "name": "SUSE openSUSE",
              "product_id": "T027843",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:opensuse:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2025.4.1",
                "product": {
                  "name": "SolarWinds Platform \u003c2025.4.1",
                  "product_id": "T048650"
                }
              },
              {
                "category": "product_version",
                "name": "2025.4.1",
                "product": {
                  "name": "SolarWinds Platform 2025.4.1",
                  "product_id": "T048650-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:solarwinds:orion_platform:2025.4.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Platform"
          }
        ],
        "category": "vendor",
        "name": "SolarWinds"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6762",
      "product_status": {
        "known_affected": [
          "T025152",
          "67646",
          "T038324",
          "T038325",
          "T038326",
          "T043916",
          "T038322",
          "T038840",
          "T025631",
          "T005180",
          "398363",
          "T048650",
          "T046654",
          "T038750",
          "T023548",
          "T043115",
          "2951",
          "T002207",
          "T041270",
          "444803",
          "T019704",
          "T027843",
          "T043174",
          "T043175",
          "T043176",
          "T041596",
          "T043177"
        ]
      },
      "release_date": "2024-10-14T22:00:00.000+00:00",
      "title": "CVE-2024-6762"
    },
    {
      "cve": "CVE-2024-6763",
      "product_status": {
        "known_affected": [
          "T025152",
          "67646",
          "T038326",
          "T043916",
          "T038327",
          "T038322",
          "T038840",
          "T025631",
          "T005180",
          "398363",
          "T048650",
          "T046654",
          "T038318",
          "T038750",
          "T023548",
          "T043115",
          "2951",
          "T002207",
          "T041270",
          "444803",
          "T019704",
          "T027843",
          "T043174",
          "T043175",
          "T043176",
          "T041596",
          "T043177"
        ]
      },
      "release_date": "2024-10-14T22:00:00.000+00:00",
      "title": "CVE-2024-6763"
    },
    {
      "cve": "CVE-2024-8184",
      "product_status": {
        "known_affected": [
          "T025152",
          "67646",
          "T038324",
          "T038325",
          "T038326",
          "T043916",
          "T038320",
          "T038321",
          "T038322",
          "T038840",
          "T038323",
          "T025631",
          "T005180",
          "398363",
          "T048650",
          "T046654",
          "T038318",
          "T038319",
          "T038750",
          "T023548",
          "T043115",
          "2951",
          "T002207",
          "T041270",
          "444803",
          "T019704",
          "T027843",
          "T043174",
          "T043175",
          "T043176",
          "T041596",
          "T043177"
        ]
      },
      "release_date": "2024-10-14T22:00:00.000+00:00",
      "title": "CVE-2024-8184"
    },
    {
      "cve": "CVE-2024-9823",
      "product_status": {
        "known_affected": [
          "T025152",
          "67646",
          "T038324",
          "T038325",
          "T043916",
          "T038840",
          "T038322",
          "T038323",
          "T025631",
          "T005180",
          "398363",
          "T048650",
          "T046654",
          "T038750",
          "T023548",
          "T043115",
          "2951",
          "T002207",
          "T041270",
          "444803",
          "T019704",
          "T027843",
          "T043174",
          "T043175",
          "T043176",
          "T041596",
          "T043177"
        ]
      },
      "release_date": "2024-10-14T22:00:00.000+00:00",
      "title": "CVE-2024-9823"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…