Intrusion PreventionEclipse.Jetty.Web.Server.HttpParser.Information.Disclosure
Description
This indicates an attack attempt against an Information Disclosure vulnerability in Eclipse Foundation Jetty Web Server.
The vulnerability is due to improper validation of user supplied data when handling crafted HTTP Requests. A remote attacker can exploit this to disclose sensitive information from affected machines using malicious packets.
Affected Products
Eclipse Foundation Jetty Web Server prior to 9.2.9.v20150224
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems
Recommended Actions
Apply the most recent upgrade or patch from the vendor
http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-07 | 14.628 | Severity:medium:high |
| ID | 40244 |
| Created | Apr 14, 2015 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2015-2080 |
| Exploit Prediction Score | 95.47% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |