Man-in-the-Middle Attack Vulnerability in JetBrains Kotlin Software

CVE-2019-10101

Summary

Prior to version 1.3.30, JetBrains Kotlin utilized an insecure HTTP connection during the build process to resolve artifacts. This flaw could expose users to man-in-the-middle (MITM) attacks, allowing an attacker to intercept and manipulate data between the user and the artifact repository. As a result, sensitive information or malicious code could be introduced, compromising the integrity of the software development process.

References