CVE:CVE-2018-12538
CNNVD:CNNVD-201806-1151
Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。
Eclipse Jetty 9.4.0版本至9.4.8版本中存在安全漏洞。攻击者可利用该漏洞访问/劫持其他HttpSessions并删除不匹配的HttpSessions。
solution:Upgrade eclipse jetty to a higher version than 9.4.8,and avoid the version [9.4.0,9.4.8]; Upgrade netapp e-series_santricity_management_plug-ins to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.40,and avoid the version [11.0,11.40]; Upgrade netapp e-series_santricity_web_services_proxy to a higher version than -; Upgrade netapp element_software to a higher version than -; Upgrade netapp hyper_converged_infrastructure to a higher version than -; Upgrade netapp oncommand_system_manager to a higher version than 3.1.3,and avoid the version [3.0.0,3.1.3]; Upgrade netapp oncommand_unified_manager to a higher version than -; Upgrade netapp santricity_cloud_connector to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp snapmanager to a higher version than -