CVE-2019-10240

HIGH · CVSS 8.1 EPSS 0.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-04-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-10240

Severity

HIGH

CVSS

8.1

EPSS

0.43%

Original NVD Description

Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.