Information Exposure in Eclipse Kura Web Server
CVE-2019-10243

5.3MEDIUM

Key Information:

Vendor

The Eclipse Foundation

Status
Eclipse Kura
Vendor
CVE Published:
9 April 2019

What is CVE-2019-10243?

Eclipse Kura, in versions prior to 4.0.0, has a vulnerability that exposes details of its underlying Ui Web server in response messages. This information leakage can assist attackers in tailoring their attacks specifically against the Kura web server, potentially compromising the security of systems that utilize these affected versions.

Affected Version(s)

Eclipse Kura <= 4.0.0

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=545834
x_refsource_CONFIRM
http://www.securityfocus.com/bid/107844
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.