CVE-2019-10246CWE-213

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory…

published April 22, 2019

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04094 · 90.7th percentile
Weakness
CWE-213 · Exposure of Sensitive Information Due to Incompatible Policies
Published
2019-04-22T20:14Z
EPSS history
Timeline
  • 22 APR 20:14Z
    In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory…
    cvelistv5