CVE-2019-10246
- Source
- https://cve.org/CVERecord?id=CVE-2019-10246
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10246.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-10246
- Aliases
- Published
- 2019-04-22T20:29:00.303Z
- Modified
- 2026-04-10T04:13:45.099901Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
- References
-
- https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- https://security.netapp.com/advisory/ntap-20190509-0003/
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=546576
Affected packages
Git / github.com/eclipse/jetty.project
Affected ranges
- Type
- GIT
- Repo
- https://github.com/eclipse/jetty.project
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affected
- Database specific
{ "versions": [ { "introduced": "0" }, { "last_affected": "9.2.27-20190403" }, { "introduced": "0" }, { "last_affected": "9.3.26-20190403" }, { "introduced": "0" }, { "last_affected": "9.4.16-20190411" }, { "introduced": "0" }, { "last_affected": "12.1.1" }, { "introduced": "0" }, { "last_affected": "8.0.0" }, { "introduced": "0" }, { "last_affected": "8.2.0" }, { "introduced": "0" }, { "last_affected": "8.0.0" }, { "introduced": "0" }, { "last_affected": "8.2.0" }, { "introduced": "0" }, { "last_affected": "8.0.0" }, { "introduced": "0" }, { "last_affected": "8.2.0" }, { "introduced": "0" }, { "last_affected": "12.0.0" }, { "introduced": "0" }, { "last_affected": "12.1.0" } ] }
Affected versions
jetty-11.*
jetty-11.0.0-alpha0
jetty-11.0.0.beta1
jetty-11.0.0.beta2
jetty-11.0.2
jetty-11.0.8
jetty-11.0.9
jetty-12.*
jetty-12.0.0.beta2x
jetty-12.0.0.beta3x
jetty-12.0.0x
jetty-12.0.5
jetty-12.0.6
jetty-12.1.0
jetty-12.1.0.beta1
jetty-12.1.1
jetty-8.*
jetty-8.0.0.M0
jetty-8.0.0.RC0
jetty-8.1.0.RC0
jetty-8.1.13.v20130910
jetty-8.1.13.v20130916
jetty-8.1.14.v20131031
jetty-8.1.15.v20140411
jetty-8.1.16.v20140903
jetty-8.1.18.v20150929
jetty-8.1.19.v20160209
jetty-8.1.20.v20160902
jetty-8.1.21.v20160908
jetty-8.2.0.v20160908
jetty-9.*
jetty-9.1.0.M0
jetty-9.1.0.RC0
jetty-9.1.0.RC1
jetty-9.1.0.RC2
jetty-9.1.0.v20131115
jetty-9.1.1.v20140108
jetty-9.1.2.v20140210
jetty-9.1.3.v20140225
jetty-9.1.4.v20140401
jetty-9.2.0.M0
jetty-9.2.0.M1
jetty-9.2.0.RC0
jetty-9.2.0.v20140523
jetty-9.2.0.v20140526
jetty-9.2.1.v20140609
jetty-9.2.10.v20150310
jetty-9.2.11.M0
jetty-9.2.11.v20150528
jetty-9.2.11.v20150529
jetty-9.2.12.M0
jetty-9.2.12.v20150709
jetty-9.2.13.v20150730
jetty-9.2.15.v20160210
jetty-9.2.18.v20160721
jetty-9.2.19.v20160908
jetty-9.2.2.v20140723
jetty-9.2.20.v20161216
jetty-9.2.21.v20170120
jetty-9.2.22.v20170606
jetty-9.2.23.v20171218
jetty-9.2.26.v20180806
jetty-9.2.27.v20190403
jetty-9.2.3.v20140905
jetty-9.2.4.v20141103
jetty-9.2.5.v20141112
jetty-9.2.6.v20141203
jetty-9.2.6.v20141205
jetty-9.2.7.v20150116
jetty-9.2.8.v20150217
jetty-9.2.9.v20150224
jetty-9.3.13.M0
jetty-9.3.17.v20170317
jetty-9.3.18.v20170406
jetty-9.3.19.v20170502
jetty-9.3.23.v20180228
jetty-9.3.24.v20180605
jetty-9.3.25.v20180904
jetty-9.3.26.v20190403
jetty-9.3.4.v20151007
jetty-9.3.7.RC1
jetty-9.3.7.v20160115
jetty-9.4.10.v20180503
jetty-9.4.12.v20180830
jetty-9.4.13.v20181111
jetty-9.4.14.v20181114
jetty-9.4.15.v20190215
jetty-9.4.16.v20190411
jetty-9.4.2.v20170220
jetty-9.4.6.v20170531
Database specific
unresolved_ranges
[
{
"events": [
{
"introduced": "3.0"
},
{
"last_affected": "3.1.3"
}
]
},
{
"events": [
{
"introduced": "9.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.6"
}
]
},
{
"events": [
{
"introduced": "9.6"
}
]
},
{
"events": [
{
"introduced": "9.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "21.0.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.1.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.1.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.1.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.1.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.1.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.1.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.2.1.3.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.2.1.4.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.2.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.3"
}
]
},
{
"events": [
{
"introduced": "11.5.0"
},
{
"last_affected": "11.7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.2.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.2.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.2.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.2.0.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.1.0.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.2.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18c"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "17.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.2.1.3.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.2.1.4.0"
}
]
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10246.json"