Maven/org.eclipse.hawkbit:hawkbit-autoconfigure CVE-2019-10240: high 8.1, EPSS 0.43%
Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit
Action: Upgrade org.eclipse.hawkbit:hawkbit-autoconfigure to 0.3.0M2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0M2 | - |
Fixed versions
| 0.3.0M2 |
Sources
- osv: GHSA-jwqm-c9f2-2cq3
- https://nvd.nist.gov/vuln/detail/CVE-2019-10240
- https://github.com/advisories/GHSA-jwqm-c9f2-2cq3
CVE-2019-10240 · published · modified · JSON