Uploaded image for project: 'JOC - JobScheduler Operations Center'
  1. JOC - JobScheduler Operations Center
  2. JOC-716

Update Jetty version to 9.4.18 due to 3rd party vulnerability issues

    XMLWordPrintable

Details

    • Fix
    • Status: Released (View Workflow)
    • Minor
    • Resolution: Fixed
    • None
    • 1.12.10
    • None
    • None
    • CVE-2019-10241

    Description

      Current Situation

      • Jetty reports vulnerability issue with
        • CVE-2019-10241
          • This vulnerability is not relevant to JOC Cockpit as the underlying functionality (directory listings) is not offered.
        • CVE-2019-10247
          • This vulnerability is not relevant to JOC Cockpit as does not display the resource location path on a 404 page.

      Desired Behavior

      • The Jetty release that ships with JOC Cockpit should be updated to a current 9.4.18 release.

      Attachments

        Activity

          People

            oh Oliver Haufe
            ap Andreas Püschel
            Anuj Mandloi Anuj Mandloi (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: