vulnwire
6.8med

CVE-2006-6969

Jetty Uses Predictable Session Identifiers

Also known as GHSA-jg2x-r643-w2ch

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.6%
percentile 76%
Public exploits
0
none known

Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks.

Exploit prediction (EPSS)

1.62% probability of exploitation in the next 30 days, higher than 76% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.eclipse.jetty:jetty-server
<4.2.27
>=5.1.0, <5.1.12
>=6.0.0, <6.0.2
>=6.1.0pre1, <6.1.0pre3
4.2.27
5.1.12
6.0.2
6.1.0pre3

Classification

Weakness
  • CWE-330 Use of Insufficiently Random Values

References

  • secunia.com /advisories/24070 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/0497 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/32240 · vdb-entry, x_refsource_XF, x_transferred
  • osvdb.org /33108 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/22405 · vdb-entry, x_refsource_BID, x_transferred
  • fisheye.codehaus.org /changelog/jetty/?cs=1274 · x_refsource_CONFIRM, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2007-02/0070.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/459164/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2006-6969 · advisory
  • github.com /jetty-project/codehaus-jetty6/commit/36f81d2e7058b012f6718bc2f1e2786694a8a4a1 · web
  • github.com /jetty-project/codehaus-jetty6/commit/b31f606bf8058a38ab6253aa8dc2dfe6a7f83c78 · web
  • github.com /jetty-project/codehaus-jetty6 · package
  • web.archive.org /web/20070208112816/http://fisheye.codehaus.org/changelog/jetty/?cs=1274 · web
  • web.archive.org /web/20070602184857/http://archives.neohapsis.com/archives/bugtraq/2007-02/0070.html · web
  • web.archive.org /web/20121019131825/http://www.securityfocus.com/archive/1/459164/100/0/threaded · web
  • web.archive.org /web/20200228100052/http://www.securityfocus.com/bid/22405 · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.