JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.
References
Configurations
History
18 Aug 2023, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2019-07-03 20:15
Updated : 2024-02-28 17:08
NVD link : CVE-2019-10103
Mitre link : CVE-2019-10103
CVE.ORG link : CVE-2019-10103
JSON object : View
Products Affected
jetbrains
- kotlin
CWE
CWE-311
Missing Encryption of Sensitive Data