CVE-2009-4609
Last modified
CVE-2009-4609 is a vulnerability of currently unknown severity. The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable.. EPSS estimates a 1.79% chance of exploitation in the next 30 days.
Description
The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mortbay | Jetty | 6.0.0 |
| Mortbay | Jetty | 6.0.1 |
| Mortbay | Jetty | 6.0.2 |
| Mortbay | Jetty | 6.1.0 |
| Mortbay | Jetty | 6.1.1 |
| Mortbay | Jetty | 6.1.2 |
| Mortbay | Jetty | 6.1.3 |
| Mortbay | Jetty | 6.1.4 |
| Mortbay | Jetty | 6.1.5 |
| Mortbay | Jetty | 6.1.6 |
| Mortbay | Jetty | 6.1.7 |
| Mortbay | Jetty | 6.1.8 |
| Mortbay | Jetty | 6.1.9 |
| Mortbay | Jetty | 6.1.10 |
| Mortbay | Jetty | 6.1.11 |
| Mortbay | Jetty | 6.1.12 |
| Mortbay | Jetty | 6.1.14 |
| Mortbay | Jetty | 6.1.15 |
| Mortbay | Jetty | 6.1.16 |
| Mortbay | Jetty | 6.1.19 |
| Mortbay | Jetty | 6.1.20 |
| Mortbay | Jetty | 7.0.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-4609?
How severe is CVE-2009-4609?
How do I fix CVE-2009-4609?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-4603Unspecified vulnerability in sapstartsrv.exe in the SAP Kern…
- CVE-2009-4604PHP remote file inclusion vulnerability in mamboleto.php in …
- CVE-2009-4605scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.…
- CVE-2009-4606South River Technologies WebDrive 9.02 build 2232 installs t…
- CVE-2009-4607The command line interface in Overland Storage Snap Server 4…
- CVE-2009-4608Cross-site scripting (XSS) vulnerability in Canon IT Solutio…
- CVE-2009-4610Multiple cross-site scripting (XSS) vulnerabilities in Mort …
- CVE-2009-4611Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace…
- CVE-2009-4612Multiple cross-site scripting (XSS) vulnerabilities in the W…
- CVE-2009-4613SQL injection vulnerability in realestate20/loginaction.php …
- CVE-2009-4614Multiple PHP remote file inclusion vulnerabilities in Moa Ga…
- CVE-2009-4615SQL injection vulnerability in review.php in MYRE Holiday Re…
Are you affected by CVE-2009-4609?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST