{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4800.json"}],"title":"jetty: path normalization","tracking":{"current_release_date":"2026-08-04T21:58:41+00:00","generator":{"date":"2026-08-04T21:58:41+00:00","engine":{"name":"Red Hat SDEngine","version":"5.3.8"}},"id":"CVE-2016-4800","initial_release_date":"2016-05-30T00:00:00+00:00","revision_history":[{"date":"2016-05-30T00:00:00+00:00","number":"1","summary":"Initial version"},{"date":"2026-08-04T17:16:38+00:00","number":"2","summary":"Current version"},{"date":"2026-08-04T21:58:41+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 6","product":{"name":"Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:6"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 6"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 7","product":{"name":"Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:7"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 7"},{"branches":[{"category":"product_name","name":"Red Hat JBoss A-MQ 6","product":{"name":"Red Hat JBoss A-MQ 6","product_id":"red_hat_jboss_a-mq_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_amq:6"}}}],"category":"product_family","name":"Red Hat JBoss A-MQ 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss BRMS 5","product":{"name":"Red Hat JBoss BRMS 5","product_id":"red_hat_jboss_brms_5","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_brms_platform:5"}}}],"category":"product_family","name":"Red Hat JBoss BRMS 5"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Data Virtualization 6","product":{"name":"Red Hat JBoss Data Virtualization 6","product_id":"red_hat_jboss_data_virtualization_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_data_virtualization:6"}}}],"category":"product_family","name":"Red Hat JBoss Data Virtualization 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform 5","product":{"name":"Red Hat JBoss Enterprise Application Platform 5","product_id":"red_hat_jboss_enterprise_application_platform_5","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_application_platform:5"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform 5"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Fuse 6","product":{"name":"Red Hat JBoss Fuse 6","product_id":"red_hat_jboss_fuse_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_fuse:6"}}}],"category":"product_family","name":"Red Hat JBoss Fuse 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Fuse Service Works 6","product":{"name":"Red Hat JBoss Fuse Service Works 6","product_id":"red_hat_jboss_fuse_service_works_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_fuse_service_works:6"}}}],"category":"product_family","name":"Red Hat JBoss Fuse Service Works 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Portal 6","product":{"name":"Red Hat JBoss Portal 6","product_id":"red_hat_jboss_portal_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_portal_platform:6"}}}],"category":"product_family","name":"Red Hat JBoss Portal 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss SOA Platform 5","product":{"name":"Red Hat JBoss SOA Platform 5","product_id":"red_hat_jboss_soa_platform_5","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_soa_platform:5"}}}],"category":"product_family","name":"Red Hat JBoss SOA Platform 5"},{"branches":[{"category":"product_name","name":"Red Hat OpenShift Enterprise 2","product":{"name":"Red Hat OpenShift Enterprise 2","product_id":"red_hat_openshift_enterprise_2","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift:2"}}}],"category":"product_family","name":"Red Hat OpenShift Enterprise 2"},{"branches":[{"category":"product_name","name":"Red Hat Satellite 6","product":{"name":"Red Hat Satellite 6","product_id":"red_hat_satellite_6","product_identification_helper":{"cpe":"cpe:/a:redhat:satellite:6"}}}],"category":"product_family","name":"Red Hat Satellite 6"},{"branches":[{"category":"product_name","name":"Red Hat Software Collections","product":{"name":"Red Hat Software Collections","product_id":"red_hat_software_collections","product_identification_helper":{"cpe":"cpe:/a:redhat:rhel_software_collections:2"}}}],"category":"product_family","name":"Red Hat Software Collections"},{"category":"product_version","name":"jetty-eclipse","product":{"name":"jetty-eclipse","product_id":"jetty-eclipse","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-eclipse"}}},{"category":"product_version","name":"jetty-eclipse.src","product":{"name":"jetty-eclipse.src","product_id":"jetty-eclipse.src","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-eclipse?arch=src"}}},{"category":"product_version","name":"jetty-io","product":{"name":"jetty-io","product_id":"jetty-io","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-io"}}},{"category":"product_version","name":"jetty-jspc-maven-plugin","product":{"name":"jetty-jspc-maven-plugin","product_id":"jetty-jspc-maven-plugin","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-jspc-maven-plugin"}}},{"category":"product_version","name":"jetty-servlets","product":{"name":"jetty-servlets","product_id":"jetty-servlets","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-servlets"}}},{"category":"product_version","name":"jetty-websocket-server","product":{"name":"jetty-websocket-server","product_id":"jetty-websocket-server","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-websocket-server"}}},{"category":"product_version","name":"jetty-security","product":{"name":"jetty-security","product_id":"jetty-security","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-security"}}},{"category":"product_version","name":"jetty-websocket-parent","product":{"name":"jetty-websocket-parent","product_id":"jetty-websocket-parent","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-websocket-parent"}}},{"category":"product_version","name":"jetty-webapp","product":{"name":"jetty-webapp","product_id":"jetty-webapp","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-webapp"}}},{"category":"product_version","name":"jetty-servlet","product":{"name":"jetty-servlet","product_id":"jetty-servlet","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-servlet"}}},{"category":"product_version","name":"jetty-continuation","product":{"name":"jetty-continuation","product_id":"jetty-continuation","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-continuation"}}},{"category":"product_version","name":"jetty-util","product":{"name":"jetty-util","product_id":"jetty-util","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-util"}}},{"category":"product_version","name":"jetty-websocket-client","product":{"name":"jetty-websocket-client","product_id":"jetty-websocket-client","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-websocket-client"}}},{"category":"product_version","name":"jetty-jaas","product":{"name":"jetty-jaas","product_id":"jetty-jaas","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-jaas"}}},{"category":"product_version","name":"jetty-proxy","product":{"name":"jetty-proxy","product_id":"jetty-proxy","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-proxy"}}},{"category":"product_version","name":"jetty-runner","product":{"name":"jetty-runner","product_id":"jetty-runner","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-runner"}}},{"category":"product_version","name":"jetty-deploy","product":{"name":"jetty-deploy","product_id":"jetty-deploy","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-deploy"}}},{"category":"product_version","name":"jetty-ant","product":{"name":"jetty-ant","product_id":"jetty-ant","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-ant"}}},{"category":"product_version","name":"jetty-rewrite","product":{"name":"jetty-rewrite","product_id":"jetty-rewrite","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-rewrite"}}},{"category":"product_version","name":"jetty-maven-plugin","product":{"name":"jetty-maven-plugin","product_id":"jetty-maven-plugin","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-maven-plugin"}}},{"category":"product_version","name":"jetty-xml","product":{"name":"jetty-xml","product_id":"jetty-xml","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-xml"}}},{"category":"product_version","name":"jetty-websocket-common","product":{"name":"jetty-websocket-common","product_id":"jetty-websocket-common","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-websocket-common"}}},{"category":"product_version","name":"jetty-http","product":{"name":"jetty-http","product_id":"jetty-http","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-http"}}},{"category":"product_version","name":"jetty-javadoc","product":{"name":"jetty-javadoc","product_id":"jetty-javadoc","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-javadoc"}}},{"category":"product_version","name":"jetty-jndi","product":{"name":"jetty-jndi","product_id":"jetty-jndi","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-jndi"}}},{"category":"product_version","name":"jetty-plus","product":{"name":"jetty-plus","product_id":"jetty-plus","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-plus"}}},{"category":"product_version","name":"jetty-jmx","product":{"name":"jetty-jmx","product_id":"jetty-jmx","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-jmx"}}},{"category":"product_version","name":"jetty-websocket-servlet","product":{"name":"jetty-websocket-servlet","product_id":"jetty-websocket-servlet","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-websocket-servlet"}}},{"category":"product_version","name":"jetty-server","product":{"name":"jetty-server","product_id":"jetty-server","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-server"}}},{"category":"product_version","name":"jetty-client","product":{"name":"jetty-client","product_id":"jetty-client","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-client"}}},{"category":"product_version","name":"jetty-util-ajax","product":{"name":"jetty-util-ajax","product_id":"jetty-util-ajax","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-util-ajax"}}},{"category":"product_version","name":"jetty-jsp","product":{"name":"jetty-jsp","product_id":"jetty-jsp","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-jsp"}}},{"category":"product_version","name":"jetty-start","product":{"name":"jetty-start","product_id":"jetty-start","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-start"}}},{"category":"product_version","name":"jetty-annotations","product":{"name":"jetty-annotations","product_id":"jetty-annotations","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-annotations"}}},{"category":"product_version","name":"jetty-project","product":{"name":"jetty-project","product_id":"jetty-project","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-project"}}},{"category":"product_version","name":"jetty-websocket-api","product":{"name":"jetty-websocket-api","product_id":"jetty-websocket-api","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-websocket-api"}}},{"category":"product_version","name":"jetty-monitor","product":{"name":"jetty-monitor","product_id":"jetty-monitor","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-monitor"}}},{"category":"product_version","name":"jetty-jaspi","product":{"name":"jetty-jaspi","product_id":"jetty-jaspi","product_identification_helper":{"purl":"pkg:rpm/redhat/jetty-jaspi"}}},{"category":"product_version","name":"jetty","product":{"name":"jetty","product_id":"jetty","product_identification_helper":{"purl":"pkg:maven/org.eclipse.jetty.documentation/jetty?type=pom"}}},{"category":"product_version","name":"rh-java-common-jetty-deploy","product":{"name":"rh-java-common-jetty-deploy","product_id":"rh-java-common-jetty-deploy","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-deploy"}}},{"category":"product_version","name":"rh-java-common-jetty-jspc-maven-plugin","product":{"name":"rh-java-common-jetty-jspc-maven-plugin","product_id":"rh-java-common-jetty-jspc-maven-plugin","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-jspc-maven-plugin"}}},{"category":"product_version","name":"rh-java-common-jetty-webapp","product":{"name":"rh-java-common-jetty-webapp","product_id":"rh-java-common-jetty-webapp","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-webapp"}}},{"category":"product_version","name":"rh-java-common-jetty-websocket-server","product":{"name":"rh-java-common-jetty-websocket-server","product_id":"rh-java-common-jetty-websocket-server","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-websocket-server"}}},{"category":"product_version","name":"rh-java-common-jetty-plus","product":{"name":"rh-java-common-jetty-plus","product_id":"rh-java-common-jetty-plus","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-plus"}}},{"category":"product_version","name":"rh-java-common-jetty-util-ajax","product":{"name":"rh-java-common-jetty-util-ajax","product_id":"rh-java-common-jetty-util-ajax","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-util-ajax"}}},{"category":"product_version","name":"rh-java-common-jetty-maven-plugin","product":{"name":"rh-java-common-jetty-maven-plugin","product_id":"rh-java-common-jetty-maven-plugin","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-maven-plugin"}}},{"category":"product_version","name":"rh-java-common-jetty-runner","product":{"name":"rh-java-common-jetty-runner","product_id":"rh-java-common-jetty-runner","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-runner"}}},{"category":"product_version","name":"rh-java-common-jetty-io","product":{"name":"rh-java-common-jetty-io","product_id":"rh-java-common-jetty-io","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-io"}}},{"category":"product_version","name":"rh-java-common-jetty-http","product":{"name":"rh-java-common-jetty-http","product_id":"rh-java-common-jetty-http","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-http"}}},{"category":"product_version","name":"rh-java-common-jetty-client","product":{"name":"rh-java-common-jetty-client","product_id":"rh-java-common-jetty-client","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-client"}}},{"category":"product_version","name":"rh-java-common-jetty-jmx","product":{"name":"rh-java-common-jetty-jmx","product_id":"rh-java-common-jetty-jmx","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-jmx"}}},{"category":"product_version","name":"rh-java-common-jetty-servlet","product":{"name":"rh-java-common-jetty-servlet","product_id":"rh-java-common-jetty-servlet","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-servlet"}}},{"category":"product_version","name":"rh-java-common-jetty-jaas","product":{"name":"rh-java-common-jetty-jaas","product_id":"rh-java-common-jetty-jaas","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-jaas"}}},{"category":"product_version","name":"rh-java-common-jetty-websocket-parent","product":{"name":"rh-java-common-jetty-websocket-parent","product_id":"rh-java-common-jetty-websocket-parent","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-websocket-parent"}}},{"category":"product_version","name":"rh-java-common-jetty-annotations","product":{"name":"rh-java-common-jetty-annotations","product_id":"rh-java-common-jetty-annotations","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-annotations"}}},{"category":"product_version","name":"rh-java-common-jetty-servlets","product":{"name":"rh-java-common-jetty-servlets","product_id":"rh-java-common-jetty-servlets","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-servlets"}}},{"category":"product_version","name":"rh-java-common-jetty-xml","product":{"name":"rh-java-common-jetty-xml","product_id":"rh-java-common-jetty-xml","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-xml"}}},{"category":"product_version","name":"rh-java-common-jetty-monitor","product":{"name":"rh-java-common-jetty-monitor","product_id":"rh-java-common-jetty-monitor","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-monitor"}}},{"category":"product_version","name":"rh-java-common-jetty-websocket-api","product":{"name":"rh-java-common-jetty-websocket-api","product_id":"rh-java-common-jetty-websocket-api","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-websocket-api"}}},{"category":"product_version","name":"rh-java-common-jetty-jndi","product":{"name":"rh-java-common-jetty-jndi","product_id":"rh-java-common-jetty-jndi","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-jndi"}}},{"category":"product_version","name":"rh-java-common-jetty-start","product":{"name":"rh-java-common-jetty-start","product_id":"rh-java-common-jetty-start","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-start"}}},{"category":"product_version","name":"rh-java-common-jetty-jsp","product":{"name":"rh-java-common-jetty-jsp","product_id":"rh-java-common-jetty-jsp","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-jsp"}}},{"category":"product_version","name":"rh-java-common-jetty-websocket-servlet","product":{"name":"rh-java-common-jetty-websocket-servlet","product_id":"rh-java-common-jetty-websocket-servlet","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-websocket-servlet"}}},{"category":"product_version","name":"rh-java-common-jetty-jaspi","product":{"name":"rh-java-common-jetty-jaspi","product_id":"rh-java-common-jetty-jaspi","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-jaspi"}}},{"category":"product_version","name":"rh-java-common-jetty-project","product":{"name":"rh-java-common-jetty-project","product_id":"rh-java-common-jetty-project","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-project"}}},{"category":"product_version","name":"rh-java-common-jetty-util","product":{"name":"rh-java-common-jetty-util","product_id":"rh-java-common-jetty-util","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-util"}}},{"category":"product_version","name":"rh-java-common-jetty-rewrite","product":{"name":"rh-java-common-jetty-rewrite","product_id":"rh-java-common-jetty-rewrite","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-rewrite"}}},{"category":"product_version","name":"rh-java-common-jetty-security","product":{"name":"rh-java-common-jetty-security","product_id":"rh-java-common-jetty-security","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-security"}}},{"category":"product_version","name":"rh-java-common-jetty-continuation","product":{"name":"rh-java-common-jetty-continuation","product_id":"rh-java-common-jetty-continuation","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-continuation"}}},{"category":"product_version","name":"rh-java-common-jetty-server","product":{"name":"rh-java-common-jetty-server","product_id":"rh-java-common-jetty-server","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-server"}}},{"category":"product_version","name":"rh-java-common-jetty-ant","product":{"name":"rh-java-common-jetty-ant","product_id":"rh-java-common-jetty-ant","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-ant"}}},{"category":"product_version","name":"rh-java-common-jetty-proxy","product":{"name":"rh-java-common-jetty-proxy","product_id":"rh-java-common-jetty-proxy","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-proxy"}}},{"category":"product_version","name":"rh-java-common-jetty-websocket-client","product":{"name":"rh-java-common-jetty-websocket-client","product_id":"rh-java-common-jetty-websocket-client","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-websocket-client"}}},{"category":"product_version","name":"rh-java-common-jetty-websocket-common","product":{"name":"rh-java-common-jetty-websocket-common","product_id":"rh-java-common-jetty-websocket-common","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-websocket-common"}}},{"category":"product_version","name":"rh-java-common-jetty-javadoc","product":{"name":"rh-java-common-jetty-javadoc","product_id":"rh-java-common-jetty-javadoc","product_identification_helper":{"purl":"pkg:rpm/redhat/rh-java-common-jetty-javadoc"}}}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"jetty-eclipse as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:jetty-eclipse"},"product_reference":"jetty-eclipse","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"jetty-eclipse.src as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:jetty-eclipse.src"},"product_reference":"jetty-eclipse.src","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"jetty-annotations as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-annotations"},"product_reference":"jetty-annotations","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-ant as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-ant"},"product_reference":"jetty-ant","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-client as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-client"},"product_reference":"jetty-client","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-continuation as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-continuation"},"product_reference":"jetty-continuation","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-deploy as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-deploy"},"product_reference":"jetty-deploy","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-http as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-http"},"product_reference":"jetty-http","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-io as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-io"},"product_reference":"jetty-io","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-jaas as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-jaas"},"product_reference":"jetty-jaas","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-jaspi as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-jaspi"},"product_reference":"jetty-jaspi","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-javadoc as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-javadoc"},"product_reference":"jetty-javadoc","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-jmx as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-jmx"},"product_reference":"jetty-jmx","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-jndi as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-jndi"},"product_reference":"jetty-jndi","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-jsp as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-jsp"},"product_reference":"jetty-jsp","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-jspc-maven-plugin as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-jspc-maven-plugin"},"product_reference":"jetty-jspc-maven-plugin","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-maven-plugin as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-maven-plugin"},"product_reference":"jetty-maven-plugin","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-monitor as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-monitor"},"product_reference":"jetty-monitor","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-plus as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-plus"},"product_reference":"jetty-plus","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-project as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-project"},"product_reference":"jetty-project","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-proxy as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-proxy"},"product_reference":"jetty-proxy","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-rewrite as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-rewrite"},"product_reference":"jetty-rewrite","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-runner as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-runner"},"product_reference":"jetty-runner","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-security as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-security"},"product_reference":"jetty-security","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-server as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-server"},"product_reference":"jetty-server","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-servlet as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-servlet"},"product_reference":"jetty-servlet","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-servlets as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-servlets"},"product_reference":"jetty-servlets","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-start as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-start"},"product_reference":"jetty-start","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-util as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-util"},"product_reference":"jetty-util","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-util-ajax as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-util-ajax"},"product_reference":"jetty-util-ajax","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-webapp as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-webapp"},"product_reference":"jetty-webapp","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-websocket-api as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-websocket-api"},"product_reference":"jetty-websocket-api","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-websocket-client as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-websocket-client"},"product_reference":"jetty-websocket-client","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-websocket-common as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-websocket-common"},"product_reference":"jetty-websocket-common","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-websocket-parent as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-websocket-parent"},"product_reference":"jetty-websocket-parent","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-websocket-server as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-websocket-server"},"product_reference":"jetty-websocket-server","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-websocket-servlet as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-websocket-servlet"},"product_reference":"jetty-websocket-servlet","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty-xml as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:jetty-xml"},"product_reference":"jetty-xml","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss A-MQ 6","product_id":"red_hat_jboss_a-mq_6:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_a-mq_6"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss BRMS 5","product_id":"red_hat_jboss_brms_5:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_brms_5"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss Data Virtualization 6","product_id":"red_hat_jboss_data_virtualization_6:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_data_virtualization_6"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss Enterprise Application Platform 5","product_id":"red_hat_jboss_enterprise_application_platform_5:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_5"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss Fuse 6","product_id":"red_hat_jboss_fuse_6:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_fuse_6"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss Fuse Service Works 6","product_id":"red_hat_jboss_fuse_service_works_6:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_fuse_service_works_6"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss Portal 6","product_id":"red_hat_jboss_portal_6:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_portal_6"},{"category":"default_component_of","full_product_name":{"name":"jetty as a component of Red Hat JBoss SOA Platform 5","product_id":"red_hat_jboss_soa_platform_5:jetty"},"product_reference":"jetty","relates_to_product_reference":"red_hat_jboss_soa_platform_5"},{"category":"default_component_of","full_product_name":{"name":"jetty-project as a component of Red Hat OpenShift Enterprise 2","product_id":"red_hat_openshift_enterprise_2:jetty-project"},"product_reference":"jetty-project","relates_to_product_reference":"red_hat_openshift_enterprise_2"},{"category":"default_component_of","full_product_name":{"name":"jetty-project as a component of Red Hat Satellite 6","product_id":"red_hat_satellite_6:jetty-project"},"product_reference":"jetty-project","relates_to_product_reference":"red_hat_satellite_6"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-annotations as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-annotations"},"product_reference":"rh-java-common-jetty-annotations","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-ant as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-ant"},"product_reference":"rh-java-common-jetty-ant","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-client as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-client"},"product_reference":"rh-java-common-jetty-client","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-continuation as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-continuation"},"product_reference":"rh-java-common-jetty-continuation","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-deploy as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-deploy"},"product_reference":"rh-java-common-jetty-deploy","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-http as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-http"},"product_reference":"rh-java-common-jetty-http","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-io as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-io"},"product_reference":"rh-java-common-jetty-io","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-jaas as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-jaas"},"product_reference":"rh-java-common-jetty-jaas","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-jaspi as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-jaspi"},"product_reference":"rh-java-common-jetty-jaspi","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-javadoc as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-javadoc"},"product_reference":"rh-java-common-jetty-javadoc","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-jmx as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-jmx"},"product_reference":"rh-java-common-jetty-jmx","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-jndi as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-jndi"},"product_reference":"rh-java-common-jetty-jndi","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-jsp as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-jsp"},"product_reference":"rh-java-common-jetty-jsp","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-jspc-maven-plugin as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-jspc-maven-plugin"},"product_reference":"rh-java-common-jetty-jspc-maven-plugin","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-maven-plugin as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-maven-plugin"},"product_reference":"rh-java-common-jetty-maven-plugin","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-monitor as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-monitor"},"product_reference":"rh-java-common-jetty-monitor","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-plus as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-plus"},"product_reference":"rh-java-common-jetty-plus","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-project as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-project"},"product_reference":"rh-java-common-jetty-project","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-proxy as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-proxy"},"product_reference":"rh-java-common-jetty-proxy","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-rewrite as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-rewrite"},"product_reference":"rh-java-common-jetty-rewrite","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-runner as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-runner"},"product_reference":"rh-java-common-jetty-runner","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-security as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-security"},"product_reference":"rh-java-common-jetty-security","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-server as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-server"},"product_reference":"rh-java-common-jetty-server","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-servlet as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-servlet"},"product_reference":"rh-java-common-jetty-servlet","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-servlets as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-servlets"},"product_reference":"rh-java-common-jetty-servlets","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-start as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-start"},"product_reference":"rh-java-common-jetty-start","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-util as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-util"},"product_reference":"rh-java-common-jetty-util","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-util-ajax as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-util-ajax"},"product_reference":"rh-java-common-jetty-util-ajax","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-webapp as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-webapp"},"product_reference":"rh-java-common-jetty-webapp","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-websocket-api as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-websocket-api"},"product_reference":"rh-java-common-jetty-websocket-api","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-websocket-client as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-websocket-client"},"product_reference":"rh-java-common-jetty-websocket-client","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-websocket-common as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-websocket-common"},"product_reference":"rh-java-common-jetty-websocket-common","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-websocket-parent as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-websocket-parent"},"product_reference":"rh-java-common-jetty-websocket-parent","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-websocket-server as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-websocket-server"},"product_reference":"rh-java-common-jetty-websocket-server","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-websocket-servlet as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-websocket-servlet"},"product_reference":"rh-java-common-jetty-websocket-servlet","relates_to_product_reference":"red_hat_software_collections"},{"category":"default_component_of","full_product_name":{"name":"rh-java-common-jetty-xml as a component of Red Hat Software Collections","product_id":"red_hat_software_collections:rh-java-common-jetty-xml"},"product_reference":"rh-java-common-jetty-xml","relates_to_product_reference":"red_hat_software_collections"}]},"vulnerabilities":[{"cve":"CVE-2016-4800","discovery_date":"2016-05-20T00:00:00+00:00","flags":[{"label":"vulnerable_code_not_present","product_ids":["red_hat_enterprise_linux_6:jetty-eclipse","red_hat_enterprise_linux_6:jetty-eclipse.src","red_hat_enterprise_linux_7:jetty-annotations","red_hat_enterprise_linux_7:jetty-ant","red_hat_enterprise_linux_7:jetty-client","red_hat_enterprise_linux_7:jetty-continuation","red_hat_enterprise_linux_7:jetty-deploy","red_hat_enterprise_linux_7:jetty-http","red_hat_enterprise_linux_7:jetty-io","red_hat_enterprise_linux_7:jetty-jaas","red_hat_enterprise_linux_7:jetty-jaspi","red_hat_enterprise_linux_7:jetty-javadoc","red_hat_enterprise_linux_7:jetty-jmx","red_hat_enterprise_linux_7:jetty-jndi","red_hat_enterprise_linux_7:jetty-jsp","red_hat_enterprise_linux_7:jetty-jspc-maven-plugin","red_hat_enterprise_linux_7:jetty-maven-plugin","red_hat_enterprise_linux_7:jetty-monitor","red_hat_enterprise_linux_7:jetty-plus","red_hat_enterprise_linux_7:jetty-project","red_hat_enterprise_linux_7:jetty-proxy","red_hat_enterprise_linux_7:jetty-rewrite","red_hat_enterprise_linux_7:jetty-runner","red_hat_enterprise_linux_7:jetty-security","red_hat_enterprise_linux_7:jetty-server","red_hat_enterprise_linux_7:jetty-servlet","red_hat_enterprise_linux_7:jetty-servlets","red_hat_enterprise_linux_7:jetty-start","red_hat_enterprise_linux_7:jetty-util","red_hat_enterprise_linux_7:jetty-util-ajax","red_hat_enterprise_linux_7:jetty-webapp","red_hat_enterprise_linux_7:jetty-websocket-api","red_hat_enterprise_linux_7:jetty-websocket-client","red_hat_enterprise_linux_7:jetty-websocket-common","red_hat_enterprise_linux_7:jetty-websocket-parent","red_hat_enterprise_linux_7:jetty-websocket-server","red_hat_enterprise_linux_7:jetty-websocket-servlet","red_hat_enterprise_linux_7:jetty-xml","red_hat_jboss_a-mq_6:jetty","red_hat_jboss_brms_5:jetty","red_hat_jboss_data_virtualization_6:jetty","red_hat_jboss_enterprise_application_platform_5:jetty","red_hat_jboss_fuse_6:jetty","red_hat_jboss_fuse_service_works_6:jetty","red_hat_jboss_portal_6:jetty","red_hat_jboss_soa_platform_5:jetty","red_hat_openshift_enterprise_2:jetty-project","red_hat_satellite_6:jetty-project","red_hat_software_collections:rh-java-common-jetty-annotations","red_hat_software_collections:rh-java-common-jetty-ant","red_hat_software_collections:rh-java-common-jetty-client","red_hat_software_collections:rh-java-common-jetty-continuation","red_hat_software_collections:rh-java-common-jetty-deploy","red_hat_software_collections:rh-java-common-jetty-http","red_hat_software_collections:rh-java-common-jetty-io","red_hat_software_collections:rh-java-common-jetty-jaas","red_hat_software_collections:rh-java-common-jetty-jaspi","red_hat_software_collections:rh-java-common-jetty-javadoc","red_hat_software_collections:rh-java-common-jetty-jmx","red_hat_software_collections:rh-java-common-jetty-jndi","red_hat_software_collections:rh-java-common-jetty-jsp","red_hat_software_collections:rh-java-common-jetty-jspc-maven-plugin","red_hat_software_collections:rh-java-common-jetty-maven-plugin","red_hat_software_collections:rh-java-common-jetty-monitor","red_hat_software_collections:rh-java-common-jetty-plus","red_hat_software_collections:rh-java-common-jetty-project","red_hat_software_collections:rh-java-common-jetty-proxy","red_hat_software_collections:rh-java-common-jetty-rewrite","red_hat_software_collections:rh-java-common-jetty-runner","red_hat_software_collections:rh-java-common-jetty-security","red_hat_software_collections:rh-java-common-jetty-server","red_hat_software_collections:rh-java-common-jetty-servlet","red_hat_software_collections:rh-java-common-jetty-servlets","red_hat_software_collections:rh-java-common-jetty-start","red_hat_software_collections:rh-java-common-jetty-util","red_hat_software_collections:rh-java-common-jetty-util-ajax","red_hat_software_collections:rh-java-common-jetty-webapp","red_hat_software_collections:rh-java-common-jetty-websocket-api","red_hat_software_collections:rh-java-common-jetty-websocket-client","red_hat_software_collections:rh-java-common-jetty-websocket-common","red_hat_software_collections:rh-java-common-jetty-websocket-parent","red_hat_software_collections:rh-java-common-jetty-websocket-server","red_hat_software_collections:rh-java-common-jetty-websocket-servlet","red_hat_software_collections:rh-java-common-jetty-xml"]}],"ids":[{"system_name":"Red Hat Bugzilla ID","text":"1340205"}],"notes":[{"category":"description","text":"The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.","title":"Vulnerability description"},{"category":"summary","text":"jetty: path normalization","title":"Vulnerability summary"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"known_not_affected":["red_hat_enterprise_linux_6:jetty-eclipse","red_hat_enterprise_linux_6:jetty-eclipse.src","red_hat_enterprise_linux_7:jetty-annotations","red_hat_enterprise_linux_7:jetty-ant","red_hat_enterprise_linux_7:jetty-client","red_hat_enterprise_linux_7:jetty-continuation","red_hat_enterprise_linux_7:jetty-deploy","red_hat_enterprise_linux_7:jetty-http","red_hat_enterprise_linux_7:jetty-io","red_hat_enterprise_linux_7:jetty-jaas","red_hat_enterprise_linux_7:jetty-jaspi","red_hat_enterprise_linux_7:jetty-javadoc","red_hat_enterprise_linux_7:jetty-jmx","red_hat_enterprise_linux_7:jetty-jndi","red_hat_enterprise_linux_7:jetty-jsp","red_hat_enterprise_linux_7:jetty-jspc-maven-plugin","red_hat_enterprise_linux_7:jetty-maven-plugin","red_hat_enterprise_linux_7:jetty-monitor","red_hat_enterprise_linux_7:jetty-plus","red_hat_enterprise_linux_7:jetty-project","red_hat_enterprise_linux_7:jetty-proxy","red_hat_enterprise_linux_7:jetty-rewrite","red_hat_enterprise_linux_7:jetty-runner","red_hat_enterprise_linux_7:jetty-security","red_hat_enterprise_linux_7:jetty-server","red_hat_enterprise_linux_7:jetty-servlet","red_hat_enterprise_linux_7:jetty-servlets","red_hat_enterprise_linux_7:jetty-start","red_hat_enterprise_linux_7:jetty-util","red_hat_enterprise_linux_7:jetty-util-ajax","red_hat_enterprise_linux_7:jetty-webapp","red_hat_enterprise_linux_7:jetty-websocket-api","red_hat_enterprise_linux_7:jetty-websocket-client","red_hat_enterprise_linux_7:jetty-websocket-common","red_hat_enterprise_linux_7:jetty-websocket-parent","red_hat_enterprise_linux_7:jetty-websocket-server","red_hat_enterprise_linux_7:jetty-websocket-servlet","red_hat_enterprise_linux_7:jetty-xml","red_hat_jboss_a-mq_6:jetty","red_hat_jboss_brms_5:jetty","red_hat_jboss_data_virtualization_6:jetty","red_hat_jboss_enterprise_application_platform_5:jetty","red_hat_jboss_fuse_6:jetty","red_hat_jboss_fuse_service_works_6:jetty","red_hat_jboss_portal_6:jetty","red_hat_jboss_soa_platform_5:jetty","red_hat_openshift_enterprise_2:jetty-project","red_hat_satellite_6:jetty-project","red_hat_software_collections:rh-java-common-jetty-annotations","red_hat_software_collections:rh-java-common-jetty-ant","red_hat_software_collections:rh-java-common-jetty-client","red_hat_software_collections:rh-java-common-jetty-continuation","red_hat_software_collections:rh-java-common-jetty-deploy","red_hat_software_collections:rh-java-common-jetty-http","red_hat_software_collections:rh-java-common-jetty-io","red_hat_software_collections:rh-java-common-jetty-jaas","red_hat_software_collections:rh-java-common-jetty-jaspi","red_hat_software_collections:rh-java-common-jetty-javadoc","red_hat_software_collections:rh-java-common-jetty-jmx","red_hat_software_collections:rh-java-common-jetty-jndi","red_hat_software_collections:rh-java-common-jetty-jsp","red_hat_software_collections:rh-java-common-jetty-jspc-maven-plugin","red_hat_software_collections:rh-java-common-jetty-maven-plugin","red_hat_software_collections:rh-java-common-jetty-monitor","red_hat_software_collections:rh-java-common-jetty-plus","red_hat_software_collections:rh-java-common-jetty-project","red_hat_software_collections:rh-java-common-jetty-proxy","red_hat_software_collections:rh-java-common-jetty-rewrite","red_hat_software_collections:rh-java-common-jetty-runner","red_hat_software_collections:rh-java-common-jetty-security","red_hat_software_collections:rh-java-common-jetty-server","red_hat_software_collections:rh-java-common-jetty-servlet","red_hat_software_collections:rh-java-common-jetty-servlets","red_hat_software_collections:rh-java-common-jetty-start","red_hat_software_collections:rh-java-common-jetty-util","red_hat_software_collections:rh-java-common-jetty-util-ajax","red_hat_software_collections:rh-java-common-jetty-webapp","red_hat_software_collections:rh-java-common-jetty-websocket-api","red_hat_software_collections:rh-java-common-jetty-websocket-client","red_hat_software_collections:rh-java-common-jetty-websocket-common","red_hat_software_collections:rh-java-common-jetty-websocket-parent","red_hat_software_collections:rh-java-common-jetty-websocket-server","red_hat_software_collections:rh-java-common-jetty-websocket-servlet","red_hat_software_collections:rh-java-common-jetty-xml"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2016-4800"},{"category":"external","summary":"RHBZ#1340205","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340205"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2016-4800","url":"https://www.cve.org/CVERecord?id=CVE-2016-4800"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2016-4800","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4800"},{"category":"external","summary":"http://www.ocert.org/advisories/ocert-2016-001.html","url":"http://www.ocert.org/advisories/ocert-2016-001.html"}],"release_date":"2016-05-30T00:00:00+00:00","scores":[{"cvss_v2":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"products":["red_hat_enterprise_linux_6:jetty-eclipse","red_hat_enterprise_linux_6:jetty-eclipse.src","red_hat_enterprise_linux_7:jetty-annotations","red_hat_enterprise_linux_7:jetty-ant","red_hat_enterprise_linux_7:jetty-client","red_hat_enterprise_linux_7:jetty-continuation","red_hat_enterprise_linux_7:jetty-deploy","red_hat_enterprise_linux_7:jetty-http","red_hat_enterprise_linux_7:jetty-io","red_hat_enterprise_linux_7:jetty-jaas","red_hat_enterprise_linux_7:jetty-jaspi","red_hat_enterprise_linux_7:jetty-javadoc","red_hat_enterprise_linux_7:jetty-jmx","red_hat_enterprise_linux_7:jetty-jndi","red_hat_enterprise_linux_7:jetty-jsp","red_hat_enterprise_linux_7:jetty-jspc-maven-plugin","red_hat_enterprise_linux_7:jetty-maven-plugin","red_hat_enterprise_linux_7:jetty-monitor","red_hat_enterprise_linux_7:jetty-plus","red_hat_enterprise_linux_7:jetty-project","red_hat_enterprise_linux_7:jetty-proxy","red_hat_enterprise_linux_7:jetty-rewrite","red_hat_enterprise_linux_7:jetty-runner","red_hat_enterprise_linux_7:jetty-security","red_hat_enterprise_linux_7:jetty-server","red_hat_enterprise_linux_7:jetty-servlet","red_hat_enterprise_linux_7:jetty-servlets","red_hat_enterprise_linux_7:jetty-start","red_hat_enterprise_linux_7:jetty-util","red_hat_enterprise_linux_7:jetty-util-ajax","red_hat_enterprise_linux_7:jetty-webapp","red_hat_enterprise_linux_7:jetty-websocket-api","red_hat_enterprise_linux_7:jetty-websocket-client","red_hat_enterprise_linux_7:jetty-websocket-common","red_hat_enterprise_linux_7:jetty-websocket-parent","red_hat_enterprise_linux_7:jetty-websocket-server","red_hat_enterprise_linux_7:jetty-websocket-servlet","red_hat_enterprise_linux_7:jetty-xml","red_hat_jboss_a-mq_6:jetty","red_hat_jboss_brms_5:jetty","red_hat_jboss_data_virtualization_6:jetty","red_hat_jboss_enterprise_application_platform_5:jetty","red_hat_jboss_fuse_6:jetty","red_hat_jboss_fuse_service_works_6:jetty","red_hat_jboss_portal_6:jetty","red_hat_jboss_soa_platform_5:jetty","red_hat_openshift_enterprise_2:jetty-project","red_hat_satellite_6:jetty-project","red_hat_software_collections:rh-java-common-jetty-annotations","red_hat_software_collections:rh-java-common-jetty-ant","red_hat_software_collections:rh-java-common-jetty-client","red_hat_software_collections:rh-java-common-jetty-continuation","red_hat_software_collections:rh-java-common-jetty-deploy","red_hat_software_collections:rh-java-common-jetty-http","red_hat_software_collections:rh-java-common-jetty-io","red_hat_software_collections:rh-java-common-jetty-jaas","red_hat_software_collections:rh-java-common-jetty-jaspi","red_hat_software_collections:rh-java-common-jetty-javadoc","red_hat_software_collections:rh-java-common-jetty-jmx","red_hat_software_collections:rh-java-common-jetty-jndi","red_hat_software_collections:rh-java-common-jetty-jsp","red_hat_software_collections:rh-java-common-jetty-jspc-maven-plugin","red_hat_software_collections:rh-java-common-jetty-maven-plugin","red_hat_software_collections:rh-java-common-jetty-monitor","red_hat_software_collections:rh-java-common-jetty-plus","red_hat_software_collections:rh-java-common-jetty-project","red_hat_software_collections:rh-java-common-jetty-proxy","red_hat_software_collections:rh-java-common-jetty-rewrite","red_hat_software_collections:rh-java-common-jetty-runner","red_hat_software_collections:rh-java-common-jetty-security","red_hat_software_collections:rh-java-common-jetty-server","red_hat_software_collections:rh-java-common-jetty-servlet","red_hat_software_collections:rh-java-common-jetty-servlets","red_hat_software_collections:rh-java-common-jetty-start","red_hat_software_collections:rh-java-common-jetty-util","red_hat_software_collections:rh-java-common-jetty-util-ajax","red_hat_software_collections:rh-java-common-jetty-webapp","red_hat_software_collections:rh-java-common-jetty-websocket-api","red_hat_software_collections:rh-java-common-jetty-websocket-client","red_hat_software_collections:rh-java-common-jetty-websocket-common","red_hat_software_collections:rh-java-common-jetty-websocket-parent","red_hat_software_collections:rh-java-common-jetty-websocket-server","red_hat_software_collections:rh-java-common-jetty-websocket-servlet","red_hat_software_collections:rh-java-common-jetty-xml"]}],"threats":[{"category":"impact","details":"Moderate","product_ids":["red_hat_enterprise_linux_6:jetty-eclipse","red_hat_enterprise_linux_6:jetty-eclipse.src","red_hat_enterprise_linux_7:jetty-annotations","red_hat_enterprise_linux_7:jetty-ant","red_hat_enterprise_linux_7:jetty-client","red_hat_enterprise_linux_7:jetty-continuation","red_hat_enterprise_linux_7:jetty-deploy","red_hat_enterprise_linux_7:jetty-http","red_hat_enterprise_linux_7:jetty-io","red_hat_enterprise_linux_7:jetty-jaas","red_hat_enterprise_linux_7:jetty-jaspi","red_hat_enterprise_linux_7:jetty-javadoc","red_hat_enterprise_linux_7:jetty-jmx","red_hat_enterprise_linux_7:jetty-jndi","red_hat_enterprise_linux_7:jetty-jsp","red_hat_enterprise_linux_7:jetty-jspc-maven-plugin","red_hat_enterprise_linux_7:jetty-maven-plugin","red_hat_enterprise_linux_7:jetty-monitor","red_hat_enterprise_linux_7:jetty-plus","red_hat_enterprise_linux_7:jetty-project","red_hat_enterprise_linux_7:jetty-proxy","red_hat_enterprise_linux_7:jetty-rewrite","red_hat_enterprise_linux_7:jetty-runner","red_hat_enterprise_linux_7:jetty-security","red_hat_enterprise_linux_7:jetty-server","red_hat_enterprise_linux_7:jetty-servlet","red_hat_enterprise_linux_7:jetty-servlets","red_hat_enterprise_linux_7:jetty-start","red_hat_enterprise_linux_7:jetty-util","red_hat_enterprise_linux_7:jetty-util-ajax","red_hat_enterprise_linux_7:jetty-webapp","red_hat_enterprise_linux_7:jetty-websocket-api","red_hat_enterprise_linux_7:jetty-websocket-client","red_hat_enterprise_linux_7:jetty-websocket-common","red_hat_enterprise_linux_7:jetty-websocket-parent","red_hat_enterprise_linux_7:jetty-websocket-server","red_hat_enterprise_linux_7:jetty-websocket-servlet","red_hat_enterprise_linux_7:jetty-xml","red_hat_jboss_a-mq_6:jetty","red_hat_jboss_brms_5:jetty","red_hat_jboss_data_virtualization_6:jetty","red_hat_jboss_enterprise_application_platform_5:jetty","red_hat_jboss_fuse_6:jetty","red_hat_jboss_fuse_service_works_6:jetty","red_hat_jboss_portal_6:jetty","red_hat_jboss_soa_platform_5:jetty","red_hat_openshift_enterprise_2:jetty-project","red_hat_satellite_6:jetty-project","red_hat_software_collections:rh-java-common-jetty-annotations","red_hat_software_collections:rh-java-common-jetty-ant","red_hat_software_collections:rh-java-common-jetty-client","red_hat_software_collections:rh-java-common-jetty-continuation","red_hat_software_collections:rh-java-common-jetty-deploy","red_hat_software_collections:rh-java-common-jetty-http","red_hat_software_collections:rh-java-common-jetty-io","red_hat_software_collections:rh-java-common-jetty-jaas","red_hat_software_collections:rh-java-common-jetty-jaspi","red_hat_software_collections:rh-java-common-jetty-javadoc","red_hat_software_collections:rh-java-common-jetty-jmx","red_hat_software_collections:rh-java-common-jetty-jndi","red_hat_software_collections:rh-java-common-jetty-jsp","red_hat_software_collections:rh-java-common-jetty-jspc-maven-plugin","red_hat_software_collections:rh-java-common-jetty-maven-plugin","red_hat_software_collections:rh-java-common-jetty-monitor","red_hat_software_collections:rh-java-common-jetty-plus","red_hat_software_collections:rh-java-common-jetty-project","red_hat_software_collections:rh-java-common-jetty-proxy","red_hat_software_collections:rh-java-common-jetty-rewrite","red_hat_software_collections:rh-java-common-jetty-runner","red_hat_software_collections:rh-java-common-jetty-security","red_hat_software_collections:rh-java-common-jetty-server","red_hat_software_collections:rh-java-common-jetty-servlet","red_hat_software_collections:rh-java-common-jetty-servlets","red_hat_software_collections:rh-java-common-jetty-start","red_hat_software_collections:rh-java-common-jetty-util","red_hat_software_collections:rh-java-common-jetty-util-ajax","red_hat_software_collections:rh-java-common-jetty-webapp","red_hat_software_collections:rh-java-common-jetty-websocket-api","red_hat_software_collections:rh-java-common-jetty-websocket-client","red_hat_software_collections:rh-java-common-jetty-websocket-common","red_hat_software_collections:rh-java-common-jetty-websocket-parent","red_hat_software_collections:rh-java-common-jetty-websocket-server","red_hat_software_collections:rh-java-common-jetty-websocket-servlet","red_hat_software_collections:rh-java-common-jetty-xml"]}],"title":"jetty: path normalization"}]}