Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-q54z-9km5-7bf3
SummaryIn Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's storage for the FileSessionDataStore.
Aliases
0
alias CVE-2018-12538
1
alias GHSA-mwcx-532g-8pq3
Fixed_packages
0
url pkg:deb/debian/jetty9@0?distro=trixie
purl pkg:deb/debian/jetty9@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@0%3Fdistro=trixie
1
url pkg:deb/debian/jetty9@9.4.50-4%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/jetty9@9.4.50-4%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.50-4%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/jetty9@9.4.57-1.1~deb12u1?distro=trixie
purl pkg:deb/debian/jetty9@9.4.57-1.1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.57-1.1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/jetty9@9.4.57-1.1~deb13u1?distro=trixie
purl pkg:deb/debian/jetty9@9.4.57-1.1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.57-1.1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/jetty9@9.4.58-1?distro=trixie
purl pkg:deb/debian/jetty9@9.4.58-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.58-1%3Fdistro=trixie
5
url pkg:deb/debian/jetty9@9.4.58-2?distro=trixie
purl pkg:deb/debian/jetty9@9.4.58-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jetty9@9.4.58-2%3Fdistro=trixie
6
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20180619
7
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.11.v20180605
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.11.v20180605
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kx4x-gnk4-yugu
4
vulnerability VCID-nubz-xqaw-tkfr
5
vulnerability VCID-nyxu-ekhs-gyb5
6
vulnerability VCID-prd3-mmuv-n3dc
7
vulnerability VCID-q35p-8qhp-aqec
8
vulnerability VCID-q3k2-1x5q-buhy
9
vulnerability VCID-uuju-ey95-tyfq
10
vulnerability VCID-y3mv-vmwd-tydt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.11.v20180605
Affected_packages
0
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.0
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uhn-tn81-cyac
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-dznb-x27e-kqan
4
vulnerability VCID-kh4j-dvmk-akaz
5
vulnerability VCID-kvqz-fppe-d7fe
6
vulnerability VCID-kx4x-gnk4-yugu
7
vulnerability VCID-nyxu-ekhs-gyb5
8
vulnerability VCID-q54z-9km5-7bf3
9
vulnerability VCID-u2b5-uyd6-fbh9
10
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.0
1
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.0.v20161208
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.0.v20161208
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.0.v20161208
2
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.0.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.0.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.0.v20180619
3
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.1.v20170120
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.1.v20170120
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.1.v20170120
4
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.1.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.1.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.1.v20180619
5
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.2.v20170220
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.2.v20170220
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.2.v20170220
6
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.2.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.2.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.2.v20180619
7
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.3.v20170317
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.3.v20170317
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.3.v20170317
8
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.3.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.3.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.3.v20180619
9
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.4.v20170414
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.4.v20170414
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.4.v20170414
10
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.4.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.4.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.4.v20180619
11
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.5.v20170502
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.5.v20170502
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-dznb-x27e-kqan
4
vulnerability VCID-kvqz-fppe-d7fe
5
vulnerability VCID-kx4x-gnk4-yugu
6
vulnerability VCID-nubz-xqaw-tkfr
7
vulnerability VCID-nyxu-ekhs-gyb5
8
vulnerability VCID-prd3-mmuv-n3dc
9
vulnerability VCID-q35p-8qhp-aqec
10
vulnerability VCID-q3k2-1x5q-buhy
11
vulnerability VCID-q54z-9km5-7bf3
12
vulnerability VCID-u2b5-uyd6-fbh9
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.5.v20170502
12
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.5.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.5.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-y3mv-vmwd-tydt
13
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.5.v20180619
13
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.6.v20170531
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.6.v20170531
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.6.v20170531
14
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.6.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.6.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.6.v20180619
15
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.RC0
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.RC0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.RC0
16
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.v20170914
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.v20170914
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.v20170914
17
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.7.v20180619
18
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20171121
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20171121
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20171121
19
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20180619
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20180619
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.8.v20180619
20
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.9.v20180320
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.9.v20180320
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.9.v20180320
21
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.RC0
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.RC0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.RC0
22
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.RC1
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.RC1
23
url pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.v20180503
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.v20180503
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9xw3-4a4u-hbbb
1
vulnerability VCID-ahev-zdjd-gqg1
2
vulnerability VCID-czhb-gqt2-17av
3
vulnerability VCID-kvqz-fppe-d7fe
4
vulnerability VCID-kx4x-gnk4-yugu
5
vulnerability VCID-nubz-xqaw-tkfr
6
vulnerability VCID-nyxu-ekhs-gyb5
7
vulnerability VCID-prd3-mmuv-n3dc
8
vulnerability VCID-q35p-8qhp-aqec
9
vulnerability VCID-q3k2-1x5q-buhy
10
vulnerability VCID-q54z-9km5-7bf3
11
vulnerability VCID-u2b5-uyd6-fbh9
12
vulnerability VCID-uuju-ey95-tyfq
13
vulnerability VCID-y3mv-vmwd-tydt
14
vulnerability VCID-znv6-77jf-v3gu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.jetty/jetty-server@9.4.10.v20180503
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12538.json
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12538.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-12538
reference_id
reference_type
scores
0
value 0.00515
scoring_system epss
scoring_elements 0.66796
published_at 2026-05-14T12:55:00Z
1
value 0.00515
scoring_system epss
scoring_elements 0.66731
published_at 2026-05-12T12:55:00Z
2
value 0.00515
scoring_system epss
scoring_elements 0.66712
published_at 2026-05-11T12:55:00Z
3
value 0.00515
scoring_system epss
scoring_elements 0.66639
published_at 2026-04-16T12:55:00Z
4
value 0.00515
scoring_system epss
scoring_elements 0.66596
published_at 2026-04-04T12:55:00Z
5
value 0.00515
scoring_system epss
scoring_elements 0.66568
published_at 2026-04-07T12:55:00Z
6
value 0.00515
scoring_system epss
scoring_elements 0.66616
published_at 2026-04-08T12:55:00Z
7
value 0.00515
scoring_system epss
scoring_elements 0.66629
published_at 2026-04-09T12:55:00Z
8
value 0.00515
scoring_system epss
scoring_elements 0.66648
published_at 2026-04-11T12:55:00Z
9
value 0.00515
scoring_system epss
scoring_elements 0.66636
published_at 2026-04-12T12:55:00Z
10
value 0.00515
scoring_system epss
scoring_elements 0.66603
published_at 2026-04-13T12:55:00Z
11
value 0.00515
scoring_system epss
scoring_elements 0.66654
published_at 2026-04-18T12:55:00Z
12
value 0.00515
scoring_system epss
scoring_elements 0.66738
published_at 2026-05-09T12:55:00Z
13
value 0.00515
scoring_system epss
scoring_elements 0.66697
published_at 2026-05-07T12:55:00Z
14
value 0.00515
scoring_system epss
scoring_elements 0.66653
published_at 2026-05-05T12:55:00Z
15
value 0.00515
scoring_system epss
scoring_elements 0.66678
published_at 2026-04-29T12:55:00Z
16
value 0.00515
scoring_system epss
scoring_elements 0.66679
published_at 2026-04-26T12:55:00Z
17
value 0.00515
scoring_system epss
scoring_elements 0.66665
published_at 2026-04-24T12:55:00Z
18
value 0.00515
scoring_system epss
scoring_elements 0.66532
published_at 2026-04-01T12:55:00Z
19
value 0.00515
scoring_system epss
scoring_elements 0.6664
published_at 2026-04-21T12:55:00Z
20
value 0.00515
scoring_system epss
scoring_elements 0.66571
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-12538
2
reference_url https://bugs.eclipse.org/bugs/show_bug.cgi?id=536018
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugs.eclipse.org/bugs/show_bug.cgi?id=536018
3
reference_url https://github.com/advisories/GHSA-mwcx-532g-8pq3
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-mwcx-532g-8pq3
4
reference_url https://github.com/eclipse/jetty.project/commit/a0b8321ef452dddff9bc6c14e3ac0108239bfa2c
reference_id
reference_type
scores
url https://github.com/eclipse/jetty.project/commit/a0b8321ef452dddff9bc6c14e3ac0108239bfa2c
5
reference_url https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E
7
reference_url https://security.netapp.com/advisory/ntap-20181014-0001
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20181014-0001
8
reference_url https://security.netapp.com/advisory/ntap-20181014-0001/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20181014-0001/
9
reference_url https://www.oracle.com/security-alerts/cpuoct2020.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2020.html
10
reference_url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
11
reference_url http://www.securitytracker.com/id/1041194
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1041194
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1595453
reference_id 1595453
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1595453
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:e-series_santricity_web_services_proxy:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:e-series_santricity_web_services_proxy:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:e-series_santricity_web_services_proxy:-:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:hyper_converged_infrastructure:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:hyper_converged_infrastructure:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:hyper_converged_infrastructure:-:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-12538
reference_id CVE-2018-12538
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-12538
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 384
name Session Fixation
description Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 6
name J2EE Misconfiguration: Insufficient Session-ID Length
description The J2EE application is configured to use an insufficient session ID length.
4
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Exploits
Severity_range_score5.6 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-q54z-9km5-7bf3