CVE:CVE-2017-9735
CNNVD:CNNVD-201706-727
Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。
Jetty 9.4.x及之前的版本中util/security/Password.java文件存在信息泄露漏洞。远程攻击者可利用该漏洞获取访问权限。
solution:Upgrade eclipse jetty to a higher version than 9.2.22,9.3.20,9.4.6,and avoid the version (,9.2.22),[9.3.0,9.3.20),[9.4.0,9.4.6); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.5.0,and avoid the version 1.5.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.2,13.3,and avoid the version 13.2,13.3; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle rest_data_services to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,15.0,16.0,17.0,and avoid the version 7.1,15.0,16.0,17.0