● CVE — Medium
CVE-2019-10246
Vendornetapp, oracle, eclipseProductsnapcenter, snapmanager, storage replication adapter for clustered data ontap, vasa provider for clustered data ontap, virtual storage console, hospitality guest access, communications services gatekeeper, data integrator, retail xstore point of service, enterprise manager base platform, flexcube core banking, flexcube private banking, endeca information discovery integrator, snap creator framework, jetty, oncommand system manager, rest data services, storage services connector, communications element manager, communications session report manager, communications session route manager, communications analytics, element, autovue, unified directoryDiscoveredApr 22, 2019UpdatedNov 21, 2024
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.