Path Traversal Vulnerability in Eclipse Kura by Eclipse Foundation
CVE-2019-10242

5.3MEDIUM

Key Information:

Vendor

The Eclipse Foundation

Status
Eclipse Kura
Vendor
CVE Published:
9 April 2019

What is CVE-2019-10242?

Eclipse Kura, up to version 4.0.0, includes a vulnerability within the SkinServlet that fails to properly validate the path provided during servlet calls. This oversight potentially allows an attacker to exploit path traversal techniques to access restricted files through specific GET requests, which may lead to unauthorized access to sensitive information.

Affected Version(s)

Eclipse Kura <= 4.0.0

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=545835
x_refsource_CONFIRM
http://www.securityfocus.com/bid/107844
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.