vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-10247

MEDIUM
5.3
CVSS Score
Published: April 22, 2019 at 08:14 PM UTC
Updated: June 17, 2026 at 02:10 AM UTC
26 products affected across 4 vendorsDebian LinuxSnapCenterSnapmanager

Using Eclipse Jetty by The Eclipse Foundation?

Get instant alerts when new vulnerabilities affect Eclipse Jetty - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.3
Exploit prediction
EPSS 6%

Description

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux· Debiandrupal
95%
10.09.0
Jetty· Eclipsemaven
95%
v ≤ 9.2.27v ≤ 9.3.26v ≤ 9.4.167.0.0 200910057.0.0 maintenance_07.0.0 maintenance_17.0.0 maintenance_27.0.0 maintenance_37.0.0 maintenance_47.0.0 rc07.0.0 rc17.0.0 rc37.0.0 rc47.0.0 rc57.0.0 rc67.0.1 200911257.0.2 201003317.0.2 rc07.1.0 201005057.1.0 rc07.1.0 rc17.1.1 201005177.1.2 201005237.1.3 201005267.1.4 201006107.1.5 201007057.1.6 201007157.2.0 201010207.2.0 rc07.2.1 201011117.2.2 201012057.3.0 201102037.3.1 201103077.4.0 201104147.4.0 rc07.4.1 201105137.4.2 201105267.4.3 201106307.4.3 201107017.4.4 201107077.4.5 201107257.5.0 201109017.5.0 rc07.5.0 rc17.5.0 rc27.5.1 201109087.5.2 201110067.5.3 201110117.5.4 201110247.6.0 201201257.6.0 201201277.6.0 rc07.6.0 rc17.6.0 rc27.6.0 rc37.6.0 rc47.6.0 rc57.6.1 201202157.6.10 201303127.6.11 201305207.6.11 201307257.6.12 201307267.6.13 201309107.6.13 201309167.6.14 201310317.6.15 201404117.6.16 201409037.6.17 201504157.6.18 201509297.6.19 201602097.6.2 201203027.6.2 201203087.6.20 201609027.6.21 201609087.6.3 201204137.6.3 201204167.6.4 201205227.6.4 201205247.6.5 201207137.6.5 201207167.6.6 201209037.6.7 201209107.6.8 201211067.6.9 201301317.x8.0.0 201109018.0.0 maintenance_08.0.0 maintenance_18.0.0 maintenance_28.0.0 maintenance_38.0.0 rc08.0.1 201109088.0.2 201110068.0.3 201110118.0.4 201110248.1.0 201201278.1.0 rc08.1.0 rc18.1.0 rc28.1.0 rc48.1.0 rc58.1.1 201202158.1.10 201303128.1.11 201305208.1.12 201307258.1.12 201307268.1.13 201309108.1.13 201309168.1.14 201310318.1.15 201404118.1.16 201409038.1.17 201504158.1.18 201509298.1.19 201602098.1.2 201203028.1.2 201203088.1.20 201609028.1.21 201609088.1.22 201609228.1.3 201204168.1.4 201205248.1.5 201207138.1.5 201207168.1.6 201209038.1.7 201209108.1.8 201211068.1.9 201301318.2.0 201609088.x9.0.0 201303089.0.0 m59.0.0 maintenance_09.0.0 maintenance_19.0.0 maintenance_29.0.0 maintenance_39.0.0 maintenance_49.0.0 maintenance_59.0.0 rc09.0.0 rc19.0.0 rc29.0.0 rc39.0.1 201304089.0.2 201304179.0.2 201404159.0.3 201305069.0.4 201306219.0.4 201306259.0.5 201308139.0.5 201308159.0.6 201309199.0.6 201309309.0.7 201310319.0.7 201311079.1.0 201311159.1.0 maintenance_09.1.0 rc09.1.0 rc19.1.0 rc29.1.1 201401089.1.2 201402109.1.3 201402259.1.4 201404019.1.5 201405059.1.6 201511069.1.6 201601129.2.0 201405239.2.0 201405269.2.0 maintenance_09.2.0 maintenance_19.2.0 rc09.2.1 201406099.2.10 201503109.2.11 201505289.2.11 201505299.2.11 maintenance_09.2.12 201507099.2.12 maintenance_09.2.13 201507309.2.14 201511069.2.15 201602109.2.16 201604079.2.16 201604149.2.17 201605179.2.18 201607219.2.19 201609089.2.2 201407239.2.20 201612169.2.21 201701209.2.22 201706069.2.23 201712189.2.24 201801059.2.25 201806069.2.26 201808069.2.27 201904039.2.3 201409059.2.4 201411039.2.5 201411129.2.6 201412039.2.6 201412059.2.7 201501169.2.8 201502179.2.9 201502249.3.0 201506019.3.0 201506089.3.0 201506129.3.0 maintenance09.3.0 maintenance19.3.0 maintenance29.3.0 rc09.3.0 rc19.3.1 201507149.3.10 201606219.3.10 maintenance_09.3.11 201607219.3.11 maintenance_09.3.12 201609159.3.13 201610149.3.13 maintenance_09.3.14 201610289.3.15 201612209.3.16 201701199.3.16 201701209.3.17 201703179.3.17 rc09.3.18 201704069.3.19 201705029.3.2 201507309.3.20 201705319.3.21 201709189.3.21 maintenance_09.3.21 rc09.3.22 201710309.3.23 201802289.3.24 201806059.3.25 201809049.3.26 201904039.3.3 201508259.3.3 201508279.3.4 201510059.3.4 201510079.3.4 rc09.3.4 rc19.3.5 201510129.3.6 201511069.3.7 201601159.3.7 rc09.3.7 rc19.3.8 201603119.3.8 201603149.3.8 rc09.3.9 201605179.3.9 maintenance_09.3.9 maintenance_19.4.0 201612079.4.0 201612089.4.0 201806199.4.0 maintenance_09.4.0 maintenance_19.4.0 rc09.4.0 rc19.4.0 rc29.4.0 rc39.4.1 201701209.4.1 201806199.4.10 201805039.4.10 rc09.4.10 rc19.4.11 201806059.4.12 201808309.4.12 rc09.4.12 rc19.4.12 rc29.4.13 201811119.4.14 201811149.4.15 201902159.4.2 201702209.4.2 201806199.4.3 201703179.4.3 201806199.4.4 201704109.4.4 201704149.4.4 201806199.4.5 201705029.4.5 201806199.4.6 201705319.4.6 201806199.4.7 201709149.4.7 201806199.4.7 rc09.4.8 201711219.4.8 201806199.4.9 20180320
Element· NetApp
95%
All versions
Oncommand System Manager· NetAppdrupal
95%
3.0 ≤ v ≤ 3.1.3
Snap Creator Framework· NetAppdrupal
95%
All versions
SnapCenter· NetAppdrupal
95%
All versions
Snapmanager· NetApp
95%
All versions
Storage Replication Adapter for Clustered Data Ontap· NetApp
95%
v ≥ 9.6
Storage Services Connector· NetApp
95%
All versions
Vasa Provider for Clustered Data Ontap· NetApp
95%
v ≥ 9.6

References (18)

x_refsource_CONFIRMIssue TrackingVendor Advisory
Source: [email protected]
https://bugs.eclipse.org/bugs/show_bug.cgi?id=546577
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html

CVSS

5.3MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-213CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card