CVE:CVE-2019-10246
CNNVD:CNNVD-201904-1008
Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。
Eclipse Jetty 9.2.27版本、9.3.26版本和9.4.16版本中存在信息泄露漏洞。攻击者可利用该漏洞泄露完整的系统路径。
solution:Upgrade eclipse jetty to a higher version than 9.2.27:20190403,9.3.26:20190403,9.4.16:20190411,and avoid the version 9.2.27:20190403,9.3.26:20190403,9.4.16:20190411; Upgrade netapp oncommand_system_manager to a higher version than 3.1.3,and avoid the version [3.0,3.1.3]; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp storage_replication_adapter_for_clustered_data_ontap to a higher version than 9.6,and avoid the version [9.6,),9.6,no fixed version after 9.6; Upgrade netapp storage_services_connector to a higher version than -; Upgrade netapp vasa_provider_for_clustered_data_ontap to a higher version than -,and avoid the version [9.6,),no fixed version after 9.6; Upgrade netapp virtual_storage_console to a higher version than 9.6,and avoid the version [9.6,),9.6,no fixed version after 9.6; Upgrade netapp element to a higher version than -; Upgrade oracle autovue to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle communications_analytics to a higher version than 12.1.1,and avoid the version 12.1.1; Upgrade oracle communications_element_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0; Upgrade oracle communications_services_gatekeeper to a higher version than 6.0,6.1,7.0,and avoid the version 6.0,6.1,7.0; Upgrade oracle communications_session_report_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0; Upgrade oracle communications_session_route_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0; Upgrade oracle data_integrator to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle endeca_information_discovery_integrator to a higher version than 3.2.0,and avoid the version 3.2.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.2,13.3,and avoid the version 13.2,13.3; Upgrade oracle flexcube_core_banking to a higher version than 11.7.0,5.2.0,and avoid the version [11.5.0,11.7.0],5.2.0; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle rest_data_services to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,15.0,16.0,17.0,and avoid the version 7.1,15.0,16.0,17.0; Upgrade oracle unified_directory to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0