Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Eclipse Jetty Session Vulnerability (GHSA-m6cp-vxjx-65j6) - Windows
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
Eclipse Jetty is prone to a vulnerability in the session management.
Insight
Insight
If an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in.
Affected Software
Affected Software
Eclipse Jetty version 9.4.40.v20210413 and prior, 10.x through 10.0.2 and 11.x through 11.0.2.
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
Update to version 9.4.41.v20210516, 10.0.3, 11.0.3 or later.