[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXvWCSLo6Hnu6RDsnSNjraiDeFe_Cjv772Z_5tKZ8ULQ":3,"g5a-risk:CVE-2022-2048":201},{"success":4,"data":5,"meta":199},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":26,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":80,"references":81,"referencesCount":39,"weaknesses":103,"weaknessesCount":119,"isActivelyExploited":120,"cisaInfo":26,"otxData":26,"relatedBlogPosts":121,"seoMetadata":122,"configurations":147,"relatedVendorCves":197,"notableEvents":198},"CVE-2022-2048","What is CVE-2022-2048?","In Eclipse Jetty HTTP\u002F2 server implementation, when encountering an invalid HTTP\u002F2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.","In Eclipse Jetty HTTP\u002F2 server implementation, when encountering an invalid HTTP\u002F2 request, the error handling has a bug that can wind up not properly cleani...","2022-07-07T21:15:10.15","2023-07-24T13:16:52.523",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"emo@eclipse.org","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":40,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":38,"BaseScore":39,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.02562,[43,43,43,43,43,43,43],"High",[47,52,57,60,65,68,71,74,77],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"eclipse","jetty","*","cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":58,"criteria":59,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"netapp","element_plug-in_for_vcenter_server","-","cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-:*:*:*:*:*:*:*",{"vendor":61,"product":66,"version":63,"criteria":67,"vulnerable":4},"management_services_for_element_software_and_netapp_hci","cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:*",{"vendor":61,"product":69,"version":63,"criteria":70,"vulnerable":4},"snapcenter","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",{"vendor":61,"product":72,"version":63,"criteria":73,"vulnerable":4},"solidfire_\\&_hci_storage_node","cpe:2.3:a:netapp:solidfire_\\&_hci_storage_node:-:*:*:*:*:*:*:*",{"vendor":61,"product":75,"version":63,"criteria":76,"vulnerable":4},"hci_compute_node","cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",{"vendor":78,"product":78,"version":50,"criteria":79,"vulnerable":4},"jenkins","cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",9,[82,88,92,96,100],{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2022\u002F09\u002F09\u002F2","Openwall",[86,87],"Mailing List","Third Party Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Fgithub.com\u002Feclipse\u002Fjetty.project\u002Fsecurity\u002Fadvisories\u002FGHSA-wgmr-mf83-7x4j","GitHub",[87],{"url":93,"source":94,"tags":95},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F08\u002Fmsg00011.html","Debian",[86,87],{"url":97,"source":98,"tags":99},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220901-0006\u002F","Netapp",[87],{"url":101,"source":94,"tags":102},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2022\u002Fdsa-5198",[87],[104,112],{"id":105,"name":106,"description":107,"extendedDescription":108,"status":109,"abstraction":110,"structure":111},"CWE-410","Insufficient Resource Pool","The product's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.","Frequently the consequence is a \"flood\" of connection or sessions.","Incomplete","Base","Simple",{"id":113,"name":114,"description":115,"extendedDescription":116,"status":117,"abstraction":118,"structure":111},"CWE-664","Improper Control of a Resource Through its Lifetime","The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.","Resources often have explicit instructions on how to be created, used and destroyed. When code does not follow these instructions, it can lead to unexpected behaviors and potentially exploitable states.\nEven without explicit instructions, various principles are expected to be adhered to, such as \"Do not use an object until after its creation is complete,\" or \"do not use an object after it has been slated for destruction.\"","Draft","Pillar",2,false,[],{"title":123,"metaDescription":124,"keywords":125,"canonicalUrl":126,"structuredData":127},"What is CVE-2022-2048? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-2048, a high severity cyber security vulnerability from 2022. In Eclipse Jetty HTTP\u002F2 server implementation, when encounte...","CVE-2022-2048, CVE-2022-2048 vulnerability, CVE-2022-2048 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, eclipse security, debian security, netapp security, jenkins security, jetty vulnerability, debian_linux vulnerability, element_plug-in_for_vcenter_server vulnerability, management_services_for_element_software_and_netapp_hci vulnerability","\u002Fwhat-is\u002Fcve-2022-2048",{"@context":128,"@type":129,"headline":123,"description":124,"datePublished":10,"dateModified":11,"author":130,"publisher":134,"about":138,"mainEntityOfPage":142,"articleSection":145,"keywords":146},"https:\u002F\u002Fschema.org","TechArticle",{"@type":131,"name":132,"url":133},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":131,"name":132,"url":133,"logo":135},{"@type":136,"url":137},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":139,"name":6,"description":140,"additionalType":141},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":143,"@id":144},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-2048","Cybersecurity","CVE-2022-2048, CVE-2022-2048 vulnerability, CVE-2022-2048 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[148,164,172,186],{"Operator":26,"Negate":26,"Nodes":149},[150],{"Operator":151,"Negate":26,"CPEMatch":152},"OR",[153,156,160],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":155,"VersionEndIncluding":26},"A055068C-4D71-4DDD-AEFF-E39982FD8DC7","9.4.47",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":157,"VersionStartExcluding":26,"VersionStartIncluding":158,"VersionEndExcluding":159,"VersionEndIncluding":26},"DB90B12D-86AF-4A9F-8C44-0213FA056919","10.0.0","10.0.9",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":162,"VersionEndExcluding":163,"VersionEndIncluding":26},"FC65CE45-D006-4A65-81EA-B7D0397DCA2B","11.0.0","11.0.9",{"Operator":26,"Negate":26,"Nodes":165},[166],{"Operator":151,"Negate":26,"CPEMatch":167},[168,170],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":26,"Negate":26,"Nodes":173},[174],{"Operator":151,"Negate":26,"CPEMatch":175},[176,178,180,182,184],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":177,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"214712B6-59AF-4B5E-84BF-AF3C74A390EA",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FDAC85F0-93AF-4BE3-AE1A-8ADAF1CDF9AB",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D452B464-1200-4B72-9A89-42DC58486191",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AD7447BC-F315-4298-A822-549942FC118B",{"Operator":26,"Negate":26,"Nodes":187},[188],{"Operator":151,"Negate":26,"CPEMatch":189},[190,193],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":192,"VersionEndIncluding":26},"FB750FC4-A7B8-464B-9CF1-02BAC0A5121B","2.263",{"Vulnerable":4,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":196,"VersionEndIncluding":26},"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","F1570EF2-F7AD-4D7A-B13C-5F729E218E0F","2.361.1",[],[],{"lastModified":11,"cacheTime":200,"version":36},1792239552569,{"score":202,"band":203,"action":204,"scoredAt":205},49,"Medium","Plan remediation","2026-10-16T06:55:02.276859+00:00"]