返回 CVE 浏览器

CVE-2019-10243

MEDIUM

5.3

CVSS Severity Score

EPSS Score0.1030%

EPSS Percentile15.95th

Published2019年4月9日

Last Modified2024年11月21日

Vulnerability Description

In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.

Affected Platforms (CPE)

📦

Eclipse

Kura

<= 4.0.0

References & Advisories

🔗 http://www.securityfocus.com/bid/107844

🔗 https://bugs.eclipse.org/bugs/show_bug.cgi?id=545834

🔗 http://www.securityfocus.com/bid/107844

🔗 https://bugs.eclipse.org/bugs/show_bug.cgi?id=545834

相关漏洞威胁

CVE-2017-76499.8

The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firew...

CVE-2019-102447.5

In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulato...

CVE-2019-102425.3

In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing pa...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...