Aller au contenu
Non notée

CVE-2019-10240 Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of…

Description

Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.

Produits et versions touchés

Produit Versions touchées Corrigé en
Eclipse hawkBit 0.3 premières → < 0.3.0M2 0.3.0M2
Les 2 CVE de Eclipse hawkBit →
Suivre cette CVE