CVE-2023-41900 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-41900 Interim 1 2 2023-10-13T23:08:36Z current 2023-09-18T23:17:30Z 2023-10-13T23:08:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-41900 Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revoke an already authenticated user, then the current request will still treat the user as authenticated. The authentication is then cleared from the session and subsequent requests will not be treated as authenticated. So a request on a previously authenticated session could be allowed to bypass authentication after it had been rejected by the `LoginService`. This impacts usages of the jetty-openid which have configured a nested `LoginService` and where that `LoginService` will is capable of rejecting previously authenticated users. Versions 9.4.52, 10.0.16, and 11.0.16 have a patch for this issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Tumbleweed jetty-annotations-9.4.53-1.1 jetty-annotations-9.4.53-150200.3.22.1 jetty-ant-9.4.53-1.1 jetty-ant-9.4.53-150200.3.22.1 jetty-cdi-9.4.53-1.1 jetty-cdi-9.4.53-150200.3.22.1 jetty-client-9.4.53-1.1 jetty-client-9.4.53-150200.3.22.1 jetty-continuation-9.4.53-1.1 jetty-continuation-9.4.53-150200.3.22.1 jetty-deploy-9.4.53-1.1 jetty-deploy-9.4.53-150200.3.22.1 jetty-fcgi-9.4.53-1.1 jetty-fcgi-9.4.53-150200.3.22.1 jetty-http jetty-http-9.4.53-1.1 jetty-http-9.4.53-150200.3.22.1 jetty-http-spi-9.4.53-1.1 jetty-http-spi-9.4.53-150200.3.22.1 jetty-io jetty-io-9.4.53-1.1 jetty-io-9.4.53-150200.3.22.1 jetty-jaas-9.4.53-1.1 jetty-jaas-9.4.53-150200.3.22.1 jetty-jmx-9.4.53-1.1 jetty-jmx-9.4.53-150200.3.22.1 jetty-jndi-9.4.53-1.1 jetty-jndi-9.4.53-150200.3.22.1 jetty-jsp-9.4.53-1.1 jetty-jsp-9.4.53-150200.3.22.1 jetty-minimal jetty-minimal-javadoc-9.4.53-1.1 jetty-minimal-javadoc-9.4.53-150200.3.22.1 jetty-openid-9.4.53-1.1 jetty-openid-9.4.53-150200.3.22.1 jetty-plus-9.4.53-1.1 jetty-plus-9.4.53-150200.3.22.1 jetty-proxy-9.4.53-1.1 jetty-proxy-9.4.53-150200.3.22.1 jetty-quickstart-9.4.53-1.1 jetty-quickstart-9.4.53-150200.3.22.1 jetty-rewrite-9.4.53-1.1 jetty-rewrite-9.4.53-150200.3.22.1 jetty-security jetty-security-9.4.53-1.1 jetty-security-9.4.53-150200.3.22.1 jetty-server jetty-server-9.4.53-1.1 jetty-server-9.4.53-150200.3.22.1 jetty-servlet jetty-servlet-9.4.53-1.1 jetty-servlet-9.4.53-150200.3.22.1 jetty-servlets-9.4.53-1.1 jetty-servlets-9.4.53-150200.3.22.1 jetty-start-9.4.53-1.1 jetty-start-9.4.53-150200.3.22.1 jetty-util jetty-util-9.4.53-1.1 jetty-util-9.4.53-150200.3.22.1 jetty-util-ajax jetty-util-ajax-9.4.53-1.1 jetty-util-ajax-9.4.53-150200.3.22.1 jetty-webapp-9.4.53-1.1 jetty-webapp-9.4.53-150200.3.22.1 jetty-xml-9.4.53-1.1 jetty-xml-9.4.53-150200.3.22.1 jetty-annotations-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-ant-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-cdi-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-client-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-continuation-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-deploy-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-fcgi-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-http-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-http-spi-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-io-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-jaas-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-jmx-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-jndi-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-jsp-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-minimal-javadoc-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-openid-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-plus-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-proxy-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-quickstart-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-rewrite-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-security-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-server-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-servlet-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-servlets-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-start-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-util-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-util-ajax-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-webapp-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-xml-9.4.53-1.1 as a component of openSUSE Tumbleweed jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Enterprise Storage 7.1 jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Enterprise Storage 7.1 jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Enterprise Storage 7.1 jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Enterprise Storage 7.1 jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Enterprise Storage 7.1 jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Enterprise Storage 7.1 jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Enterprise Storage 7.1 jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-http-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-io-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-security-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-server-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-servlet-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-util-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-util-ajax-9.4.53-150200.3.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-annotations-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-ant-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-cdi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-client-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-continuation-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-deploy-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-fcgi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-http-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-http-spi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-io-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-jaas-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-jmx-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-jndi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-jsp-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-minimal-javadoc-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-openid-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-plus-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-proxy-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-quickstart-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-rewrite-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-security-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-server-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-servlet-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-servlets-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-start-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-util-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-util-ajax-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-webapp-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-xml-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.4 jetty-annotations-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-ant-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-cdi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-client-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-continuation-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-deploy-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-fcgi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-http-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-http-spi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-io-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-jaas-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-jmx-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-jndi-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-jsp-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-minimal-javadoc-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-openid-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-plus-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-proxy-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-quickstart-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-rewrite-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-security-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-server-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-servlet-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-servlets-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-start-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-util-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-util-ajax-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-webapp-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-xml-9.4.53-150200.3.22.1 as a component of openSUSE Leap 15.5 jetty-http as a component of SUSE Enterprise Storage 7.1 jetty-io as a component of SUSE Enterprise Storage 7.1 jetty-security as a component of SUSE Enterprise Storage 7.1 jetty-server as a component of SUSE Enterprise Storage 7.1 jetty-servlet as a component of SUSE Enterprise Storage 7.1 jetty-util as a component of SUSE Enterprise Storage 7.1 jetty-util-ajax as a component of SUSE Enterprise Storage 7.1 jetty-minimal as a component of SUSE Enterprise Storage 7.1 jetty-http as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-io as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-security as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-servlet as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-util as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-util-ajax as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-minimal as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS jetty-http as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-io as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-security as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-servlet as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-util as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-util-ajax as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-minimal as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS jetty-http as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-io as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-security as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-servlet as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-util as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-util-ajax as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-minimal as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jetty-http as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-io as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-security as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-server as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-servlet as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-util as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-util-ajax as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-minimal as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 jetty-http as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-io as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-security as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-server as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-servlet as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-util as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-util-ajax as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-minimal as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 jetty-http as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-io as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-security as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-server as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-servlet as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-util as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-util-ajax as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-minimal as a component of SUSE Linux Enterprise Real Time 15 SP3 jetty-http as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-io as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-security as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-server as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-servlet as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-util as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-util-ajax as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-minimal as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jetty-http as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-io as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-security as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-server as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-servlet as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-util as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-util-ajax as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-minimal as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jetty-http as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-io as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-security as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-servlet as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-util as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-util-ajax as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-minimal as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 jetty-http as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-io as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-security as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-servlet as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-util as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-util-ajax as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jetty-minimal as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revoke an already authenticated user, then the current request will still treat the user as authenticated. The authentication is then cleared from the session and subsequent requests will not be treated as authenticated. So a request on a previously authenticated session could be allowed to bypass authentication after it had been rejected by the `LoginService`. This impacts usages of the jetty-openid which have configured a nested `LoginService` and where that `LoginService` will is capable of rejecting previously authenticated users. Versions 9.4.52, 10.0.16, and 11.0.16 have a patch for this issue. CVE-2023-41900 openSUSE Tumbleweed:jetty-annotations-9.4.53-1.1 openSUSE Tumbleweed:jetty-ant-9.4.53-1.1 openSUSE Tumbleweed:jetty-cdi-9.4.53-1.1 openSUSE Tumbleweed:jetty-client-9.4.53-1.1 openSUSE Tumbleweed:jetty-continuation-9.4.53-1.1 openSUSE Tumbleweed:jetty-deploy-9.4.53-1.1 openSUSE Tumbleweed:jetty-fcgi-9.4.53-1.1 openSUSE Tumbleweed:jetty-http-9.4.53-1.1 openSUSE Tumbleweed:jetty-http-spi-9.4.53-1.1 openSUSE Tumbleweed:jetty-io-9.4.53-1.1 openSUSE Tumbleweed:jetty-jaas-9.4.53-1.1 openSUSE Tumbleweed:jetty-jmx-9.4.53-1.1 openSUSE Tumbleweed:jetty-jndi-9.4.53-1.1 openSUSE Tumbleweed:jetty-jsp-9.4.53-1.1 openSUSE Tumbleweed:jetty-minimal-javadoc-9.4.53-1.1 openSUSE Tumbleweed:jetty-openid-9.4.53-1.1 openSUSE Tumbleweed:jetty-plus-9.4.53-1.1 openSUSE Tumbleweed:jetty-proxy-9.4.53-1.1 openSUSE Tumbleweed:jetty-quickstart-9.4.53-1.1 openSUSE Tumbleweed:jetty-rewrite-9.4.53-1.1 openSUSE Tumbleweed:jetty-security-9.4.53-1.1 openSUSE Tumbleweed:jetty-server-9.4.53-1.1 openSUSE Tumbleweed:jetty-servlet-9.4.53-1.1 openSUSE Tumbleweed:jetty-servlets-9.4.53-1.1 openSUSE Tumbleweed:jetty-start-9.4.53-1.1 openSUSE Tumbleweed:jetty-util-9.4.53-1.1 openSUSE Tumbleweed:jetty-util-ajax-9.4.53-1.1 openSUSE Tumbleweed:jetty-webapp-9.4.53-1.1 openSUSE Tumbleweed:jetty-xml-9.4.53-1.1 SUSE Enterprise Storage 7.1:jetty-http-9.4.53-150200.3.22.1 SUSE Enterprise Storage 7.1:jetty-io-9.4.53-150200.3.22.1 SUSE Enterprise Storage 7.1:jetty-security-9.4.53-150200.3.22.1 SUSE Enterprise Storage 7.1:jetty-server-9.4.53-150200.3.22.1 SUSE Enterprise Storage 7.1:jetty-servlet-9.4.53-150200.3.22.1 SUSE Enterprise Storage 7.1:jetty-util-9.4.53-150200.3.22.1 SUSE Enterprise Storage 7.1:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-util-ajax-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-http-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-io-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-security-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-server-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-servlet-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-util-9.4.53-150200.3.22.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-util-ajax-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-annotations-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-ant-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-cdi-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-client-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-continuation-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-deploy-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-fcgi-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-http-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-http-spi-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-io-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-jaas-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-jmx-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-jndi-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-jsp-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-minimal-javadoc-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-openid-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-plus-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-proxy-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-quickstart-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-rewrite-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-security-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-server-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-servlet-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-servlets-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-start-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-util-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-util-ajax-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-webapp-9.4.53-150200.3.22.1 openSUSE Leap 15.4:jetty-xml-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-annotations-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-ant-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-cdi-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-client-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-continuation-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-deploy-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-fcgi-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-http-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-http-spi-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-io-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-jaas-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-jmx-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-jndi-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-jsp-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-minimal-javadoc-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-openid-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-plus-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-proxy-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-quickstart-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-rewrite-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-security-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-server-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-servlet-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-servlets-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-start-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-util-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-util-ajax-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-webapp-9.4.53-150200.3.22.1 openSUSE Leap 15.5:jetty-xml-9.4.53-150200.3.22.1 SUSE Enterprise Storage 7.1:jetty-http SUSE Enterprise Storage 7.1:jetty-io SUSE Enterprise Storage 7.1:jetty-minimal SUSE Enterprise Storage 7.1:jetty-security SUSE Enterprise Storage 7.1:jetty-server SUSE Enterprise Storage 7.1:jetty-servlet SUSE Enterprise Storage 7.1:jetty-util SUSE Enterprise Storage 7.1:jetty-util-ajax SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-http SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-io SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-minimal SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-security SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-server SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-servlet SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-util SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jetty-util-ajax SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-http SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-io SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-minimal SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-security SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-server SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-servlet SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-util SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:jetty-util-ajax SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-http SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-io SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-minimal SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-security SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-server SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-servlet SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-util SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jetty-util-ajax SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-http SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-io SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-minimal SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-security SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-server SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-servlet SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-util SUSE Linux Enterprise Module for Development Tools 15 SP4:jetty-util-ajax SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-http SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-io SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-minimal SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-security SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-server SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-servlet SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-util SUSE Linux Enterprise Module for Development Tools 15 SP5:jetty-util-ajax SUSE Linux Enterprise Real Time 15 SP3:jetty-http SUSE Linux Enterprise Real Time 15 SP3:jetty-io SUSE Linux Enterprise Real Time 15 SP3:jetty-minimal SUSE Linux Enterprise Real Time 15 SP3:jetty-security SUSE Linux Enterprise Real Time 15 SP3:jetty-server SUSE Linux Enterprise Real Time 15 SP3:jetty-servlet SUSE Linux Enterprise Real Time 15 SP3:jetty-util SUSE Linux Enterprise Real Time 15 SP3:jetty-util-ajax SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-http SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-io SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-minimal SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-security SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-server SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-servlet SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-util SUSE Linux Enterprise Server 15 SP2-LTSS:jetty-util-ajax SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-http SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-io SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-minimal SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-security SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-server SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-servlet SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-util SUSE Linux Enterprise Server 15 SP3-LTSS:jetty-util-ajax SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-http SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-io SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-minimal SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-security SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-server SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-servlet SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-util SUSE Linux Enterprise Server for SAP Applications 15 SP2:jetty-util-ajax SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-http SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-io SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-minimal SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-security SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-server SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-servlet SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-util SUSE Linux Enterprise Server for SAP Applications 15 SP3:jetty-util-ajax low 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N