tocsin

CVE-2019-10240

10 advisories.

Maven/org.eclipse.hawkbit:hawkbit-autoconfigure CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-autoconfigure to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-ui CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-ui to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-parent CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-parent to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-starters CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-starters to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-boot-starter CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-boot-starter to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-update-server CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-update-server to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-ui CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-ui to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-api CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-api to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-boot-starter-dmf-api CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-boot-starter-dmf-api to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON

Maven/org.eclipse.hawkbit:hawkbit-boot-starter-ddi-api CVE-2019-10240: high 8.1, EPSS 0.43%

Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

Action: Upgrade org.eclipse.hawkbit:hawkbit-boot-starter-ddi-api to 0.3.0M2 or later.

Affected

introducedfixedlast affected
00.3.0M2-

Fixed versions

0.3.0M2

Sources

CVE-2019-10240 · published · modified · JSON