CVE:CVE-2017-7658
CNNVD:CNNVD-201806-1241
Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。
Eclipse Jetty Server 9.2.x及之前版本、9.3.x版本和9.4.x版本中存在环境问题漏洞。攻击者可借助特制的请求利用该漏洞绕过授权。
solution:Upgrade eclipse jetty to a higher version than 9.2.26,9.3.24,9.4.11,and avoid the version (,9.2.26],[9.3.0,9.3.24),[9.4.0,9.4.11); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle rest_data_services to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c; Upgrade oracle retail_xstore_payment to a higher version than 3.3,and avoid the version 3.3; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,15.0,16.0,17.0,and avoid the version 7.1,15.0,16.0,17.0; Upgrade hp xp_p9000_command_view to a higher version than 8.6.2-00,and avoid the version [8.4.0-00,8.6.2-00]; Upgrade netapp e-series_santricity_management to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.50.1,and avoid the version [11.0,11.50.1]; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp hci_storage_node to a higher version than -; Upgrade netapp oncommand_system_manager to a higher version than 3.1.3,and avoid the version [3.0,3.1.3]; Upgrade netapp oncommand_unified_manager_for_7-mode to a higher version than -; Upgrade netapp santricity_cloud_connector to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp storage_services_connector to a higher version than -