● CVE — Medium
CVE-2021-34429
Vendornetapp, oracle, eclipseProducte-series santricity os controller, e-series santricity web services, communications diameter signaling router, solidfire, snap creator framework, jetty, rest data services, hci management node, element plug-in for vcenter server, communications cloud native core unified data repository, communications cloud native core security edge protection proxy, autovue for agile product lifecycle management, communications cloud native core service communication proxy, communications cloud native core binding support function, financial services crime and compliance management studio, retail eftlink, snapcenter plug-in, stream analyticsDiscoveredJul 15, 2021UpdatedNov 21, 2024
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.