CVE-2015-2080: Infoleak
Published Oct 7, 2016
·Updated
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
Affected Software
9 affected components
fedoraproject fedora=22
Mortbay Jetty=9.2.3
Mortbay Jetty=9.2.4
Mortbay Jetty=9.2.5
Mortbay Jetty=9.2.6
Mortbay Jetty=9.2.7
Mortbay Jetty=9.2.8
Mortbay Jetty=9.3.0-m0
Mortbay Jetty=9.3.0-m1
Event History
Oct 7, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2080?
CVE-2015-2080 is classified as a medium severity vulnerability due to the potential for information disclosure.
2
How do I fix CVE-2015-2080?
To fix CVE-2015-2080, update Eclipse Jetty to version 9.2.9 or later.
3
What types of software are affected by CVE-2015-2080?
CVE-2015-2080 affects multiple versions of Eclipse Jetty and certain versions of Fedora operating systems.
4
What is the impact of CVE-2015-2080?
The impact of CVE-2015-2080 includes the risk of unauthorized access to sensitive information from process memory.
5
Can CVE-2015-2080 be exploited remotely?
Yes, CVE-2015-2080 can be exploited remotely through crafted HTTP headers.