CVE:CVE-2021-34429
CNNVD:CNNVD-202107-1094
Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。
Eclipse Jetty 9.4.37-9.4.42、10.0.1-10.0.5 和 11.0.1-11.0.5版本存在安全漏洞，攻击者可以使用一些编码字符制作 URI 来访问 WEB-INF 目录的内容或绕过一些安全限制。
solution:Upgrade eclipse jetty to a higher version than 9.4.43,10.0.6,11.0.6,and avoid the version [9.4.37,9.4.43),[10.0.1,10.0.6),[11.0.1,11.0.6); Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0,11.70.1]; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp element_plug-in_for_vcenter_server to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter_plug-in to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade oracle autovue_for_agile_product_lifecycle_management to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_cloud_native_core_security_edge_protection_proxy to a higher version than 1.5.0,and avoid the version 1.5.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.0.2,and avoid the version [8.0.0.0,8.5.0.2]; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade oracle rest_data_services to a higher version than 22.1.1,and avoid the version (,22.1.1); Upgrade oracle retail_eftlink to a higher version than 20.0.1,and avoid the version 20.0.1; Upgrade oracle stream_analytics to a higher version than 19.1.0.0.6.4,19c,and avoid the version (,19.1.0.0.6.4),19c