CVE-2019-10243CWE-497

In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies

published April 9, 2019

CVSS
—
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01337 · 71.0th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2019-04-09T15:42Z
EPSS history
Timeline
  • 09 APR 15:42Z
    In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies
    cvelistv5