CVE-2015-2080
The MITRE CVE dictionary describes this issue as:
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
Find out more about CVE-2015-2080 from the MITRE CVE dictionary dictionary and NIST NVD.
Statement
This issue did not affect the versions of jetty as shipped with Red Hat Enterprise Linux 7, versions of openshift-origin-cartridge-fuse as shipped with Red Hat OpenShift Enterprise 2.1, and versions of nutch as shipped with Red Hat Satellite 5.
CVSS v2 metrics
NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.
| Base Score | 5 |
|---|---|
| Base Metrics | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| Access Vector | Network |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | None |
| Availability Impact | None |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Affected Packages State
| Platform | Package | State |
|---|---|---|
| Red Hat Satellite 5 | nutch | Not affected |
| Red Hat OpenShift Enterprise 2 | openshift-origin-cartridge-fuse | Not affected |
| Red Hat Enterprise Linux 7 | jetty | Not affected |
External References
CVE description copyright © 2017, The MITRE Corporation