CVE-2019-10243

2019-04-0916:29:01

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.5%

JSON

In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.

CPENameOperatorVersion
kuraeqKURA_3.0.0_M1
kuraeqKURA_1.1.1_RELEASE
kuraeqKURA_3.1.0_RELEASE
kuraeqKURA_1.2.0_RC3
kuraeqKURA_1.2.0_RELEASE
kuraeqKURA_1.2.0_RC5
kuraeqKURA_1.1.2_RELEASE
kuraeqKURA_1.2.1_RELEASE
kuraeqKURA_1.2.1_RC3
kuraeqKURA_1.2.1_RC2

Name	Operator	Version
kura	eq	KURA_3.0.0_M1
kura	eq	KURA_1.1.1_RELEASE
kura	eq	KURA_3.1.0_RELEASE
kura	eq	KURA_1.2.0_RC3
kura	eq	KURA_1.2.0_RELEASE
kura	eq	KURA_1.2.0_RC5
kura	eq	KURA_1.1.2_RELEASE
kura	eq	KURA_1.2.1_RELEASE
kura	eq	KURA_1.2.1_RC3
kura	eq	KURA_1.2.1_RC2