Title: Eclipse Jetty Denial of Service (DoS) Vulnerability
CVSS: 3.7
- What exactly is the issue that we want to mitigate.
Resolve CVSS: 3.7 : Eclipse Jetty Denial of Service (DoS) Vulnerability
https://www.cve.org/CVERecord?id=CVE-2024-9823
- What are we going to do to rectify it (the steps we are going to take).
Upgrade the Lamaxu agent to version 7.0.1.10 to upgrade the vulnerable Jetty libraries to version 9.4.56.v20240826
- What happens if not addressed?
Unauthorized users could cause remote denial-of-service (DoS) attack and exhaust the server's memory.
- What's the impact and will there be possible downtime?
No impact unless denial-of-service (DoS) attack occurs.
- Risks, if any, in implementing the change.
No risks