CVE-2009-4609

The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-01-13

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Jetty (Mortbay)

References

• http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt