CVE-2022-2047

Published: Jul 7, 2022Modified: Jun 17, 2026

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

Affected (10)

Products: Eclipse: Jetty · Debian: Debian Linux · Netapp: Element Plug In For Vcenter Server, Hci Compute Node, Management Services For Element Software And Netapp Hci, Snapcenter, Solidfire & Hci Storage Node

1 product

1 product

5 products

Element Plug In For Vcenter Server

Hci Compute Node

Management Services For Element Software And Netapp Hci

Snapcenter

Solidfire & Hci Storage Node

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Eclipse Jetty	Before 9.4.46
Eclipse Jetty	From 10.0.0 to 10.0.9
Eclipse Jetty	From 11.0.0 to 11.0.9

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Element Plug In For Vcenter Server	All versions
Netapp Hci Compute Node	All versions
Netapp Management Services For Element Software And Netapp Hci	All versions
Netapp Snapcenter	All versions
Netapp Solidfire & Hci Storage Node	All versions