Code injection

2019-04-0916:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.5%

JSON

In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.

CPENameOperatorVersion
kurale4.0.0

CPE	Name	Operator	Version
	kura	le	4.0.0

References

www.securityfocus.com/bid/107844

bugs.eclipse.org/bugs/show_bug.cgi?id=545834