CVE-2019-10240 | BDVDB-2026-114693 Detail

The Eclipse FoundationEclipse hawkBit

Description#

Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-829 Inclusion of Functionality from Untrusted Control Sphere
CWE-494 Download of Code Without Integrity Check

References#

https://bugs.eclipse.org/bugs/show_bug.cgi?id=546053

Exploit#

No public exploit known

History#

Version 12019-04-03Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.