StackRadar

CVE-2018-12536

Medium

Advisory

Published 19 Oct 2018In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.043
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

Eclipse Jetty Server generates error message containing sensitive information

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
jetty-servermaven9.2.2.v20140723, 9.2.5.v20141112, 9.2.10.v20150310, 9.2.13.v20150730+9 more9.3.24.v20180605, 9.4.11.v2018060520
OSV records
GHSA-9rgv-h7x4-qw8g

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.41 of 3See more

spark microsoft 1.0.4

1 of the 3 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jetty-server@9.3.11.v20160721
9.3.24.v20180605

Open the chart page →

13,738
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-server@9.3.20.v20170531
9.3.24.v20180605

Open the chart page →

7,166
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@9.2.5.v20141112
9.3.24.v20180605
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.3.24.v20180605

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.24.v20180605

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-server@9.2.5.v20141112
9.3.24.v20180605

Open the chart page →

8,198
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
jetty-server@9.3.20.v20170531
9.3.24.v20180605

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@9.2.5.v20141112
9.3.24.v20180605

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605

Open the chart page →

13,392
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@9.4.8.v20171121
9.4.11.v20180605

Open the chart page →

2,406
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.11.v20180605

Open the chart page →

5,078
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
jetty-server@9.4.8.v20171121
9.4.11.v20180605

Open the chart page →

7,226
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.11.v20180605

Open the chart page →

16,860
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
jetty-server@9.2.22.v20170606
9.3.24.v20180605

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.24.v20180605

Open the chart page →

5,639
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@9.2.5.v20141112
9.3.24.v20180605
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.3.24.v20180605

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@9.2.5.v20141112
9.3.24.v20180605

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605

Open the chart page →

17,511
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.11.v20180605

Open the chart page →

4,303
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jetty-server@9.2.13.v20150730
9.3.24.v20180605

Open the chart page →

19,295
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
jetty-server@9.4.5.v20170502
9.4.11.v20180605

Open the chart page →

10,682
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.11.v20180605

Open the chart page →

15,855
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
ncsa/datawolf:4.7.0af6649d59150
jetty-server@9.2.2.v20140723
9.3.24.v20180605

Open the chart page →

4,989
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
jetty-server@9.2.10.v20150310
9.3.24.v20180605

Open the chart page →

55,726
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-server@9.4.8.v20171121
9.4.11.v20180605

Open the chart page →

4,177
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2018-12536.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.11.v20180605

Open the chart page →

4,303

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@9.2.5.v20141112
9.3.24.v20180605
4
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605
4
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.11.v20180605
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.3.24.v20180605
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.11.v20180605
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-server@9.3.20.v20170531
9.3.24.v20180605
1
apacheignite/ignite:2.7.0d7deab68b8fa
jetty-server@9.3.20.v20170531
9.3.24.v20180605
1
bivas/presto:0.19605545994f806
jetty-server@9.4.8.v20171121
9.4.11.v20180605
1
craigwillis/c2metadata-bd:latestae317d7e4724
jetty-server@9.2.10.v20150310
9.3.24.v20180605
1
dbanda/livy:0.80ca125e68e53
jetty-server@9.3.11.v20160721
9.3.24.v20180605
1
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-server@9.4.8.v20171121
9.4.11.v20180605
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jetty-server@9.2.13.v20150730
9.3.24.v20180605
1
jenkinsci/jenkins:2.67a1f33f004659
jetty-server@9.4.5.v20170502
9.4.11.v20180605
1
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@9.4.8.v20171121
9.4.11.v20180605
1
library/neo4j:3.3.0d4eaa8484246
jetty-server@9.2.22.v20170606
9.3.24.v20180605
1
ncsa/datawolf:4.7.0af6649d59150
jetty-server@9.2.2.v20140723
9.3.24.v20180605
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-server@9.2.5.v20141112
9.3.24.v20180605
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.24.v20180605
1
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.24.v20180605
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.11.v20180605
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.