CVE-2009-4609: Infoleak
The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4609?
CVE-2009-4609 is considered a medium severity vulnerability due to the potential exposure of sensitive information.
How can I mitigate CVE-2009-4609?
To mitigate CVE-2009-4609, it's recommended to disable the Dump Servlet or upgrade to a patched version of Jetty.
Which versions are affected by CVE-2009-4609?
CVE-2009-4609 affects Mort Bay Jetty versions 6.x and 7.0.0.
What kind of information can be exposed by CVE-2009-4609?
CVE-2009-4609 can expose sensitive information such as internal variables, including the getPathTranslated variable.
Is there a workaround for CVE-2009-4609?
Yes, a workaround for CVE-2009-4609 includes implementing access controls to restrict requests to the /dump/ URI.