After Update IPS, Not found CVE-2019-17638 signature

[Thin]

Hello

I have a question about IPS Signature again.

Refer to https://research.checkpoint.com/2020/24th-august-threat-intelligence-bulletin/ 

I see Check Point IPS provides protection against this threat (Jenkins Jetty Buffer Overflow (CVE-2019-17638)) but  when I update ips, there is no CVE-2019-17638 signature.

What should I do to find CVE-2019-17638 signature in Check Point IPS?

[G_W_Albrecht]

This is a bug in Embedded Jetty version9.4.27 -9.4.29 :

https://github.com/eclipse/jetty.project/issues/4936

I would rather use the fixed Jetty 😉

[Thin]

Thank you. Actually, I need IPS signature in Check Point IPS for CVE-2019-17638.

[G_W_Albrecht]

Because you still need to have Embedded Jetty version9.4.27 -9.4.29 installed ? What am i missing here ?

[Thin]

I cannot proceed that, It is out of my work scope and my colleague needs CVE-2019-17638 IPS signature in Check Point.

[_Val_]

@G_W_Albrecht the question is legit. I am checking with R&D

[_Val_ · Accepted solution]

According to developers, the protection is currently being tested for making sure it is effective and reliable. It should be visible in the next IPS update, which is due to be out in a day or two.

[Adi_Ikan]

The protection has been released, more info can be found in the dedicated advisory page.

[Thin]

Thank you so much, I have already updated the protection.