CVE-2019-10240
Description
Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.
Risk Information
Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.082
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-autoconfigure 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-ddi-api 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-dmf-api 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-mgmt-api 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-mgmt-ui 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-starters 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-ui 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-update-server 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse - hawkbit-parent 0.3.0 | Windows |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-autoconfigure for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-ddi-api for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-dmf-api for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-mgmt-api for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-boot-starter-mgmt-ui for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-starters for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-ui for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse-hawkbit-update-server for Linux 0.3.0 | Linux |
| Vulnerabilities CVE-2019-10240 are fixed in Eclipse - hawkbit-parent for Linux 0.3.0 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234