In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: eclipse

Published: 2019-04-22T20:14:49

Updated: 2021-06-14T17:20:06

Reserved: 2019-03-27T00:00:00


Link: CVE-2019-10246

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2019-04-22T20:29:00.303

Modified: 2023-11-07T03:02:27.763


Link: CVE-2019-10246

JSON object: View

cve-icon Redhat Information

No data.