CVE-2019-12736

JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection...

CVE-2019-12736

JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection...

CVE-2019-12737

CVE-2019-12737 affects JetBrains Kotlin Ktor framework prior to 1.2.0-rc, where UserHashedTableAuth stores credentials using a one-way hash with a predictable salt. This weakens credential protection and aligns with the NVD CVSS 2.0/3.1 scores (base ~5.0–5.3, MEDIUM). The issue is documented acro...

CVE-2019-12737

UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials...

CVE-2019-12737

UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials...

CVE-2019-12737: Use of Password Hash With Insufficient Computational Effort

UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials...

CVE-2019-12736: Improper Neutralization of Special Elements used in a Command

JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection...

PT-2019-12909

Name of the Vulnerable Software and Affected Versions JetBrains Ktor framework versions prior to 1.2.0-rc Description The issue concerns the use of a one-way hash with a predictable salt for storing user credentials in the UserHashedTableAuth component. This could potentially lead to security...

PT-2019-12908

Name of the Vulnerable Software and Affected Versions JetBrains Ktor framework versions prior to 1.2.0-rc Description The issue arises from the failure to sanitize the username provided by the user for the LDAP protocol, leading to command injection. Recommendations For versions prior to 1.2.0-rc...

CVE-2019-10102

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

CVE-2019-10102

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

Code injection

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

CVE-2019-10102

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

CVE-2019-10102: Cleartext Transmission of Sensitive Information

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

CVE-2019-10102

CVE-2019-10102 affects JetBrains/Ktor-related tooling (Kotlin IDE template) before version 1.1.0, where artifacts were resolved over http during build, enabling potential MITM attacks. This vulnerability is addressed in the Kotlin plugin fix release 1.3.30; affected branches rely on prior Kotlin ...

CVE-2019-10102

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

PT-2019-11506 · Jetbrains · Kotlin Plugin +1

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor framework versions prior to 1.1.0 Description: The issue allows for a potential MITM attack due to the resolution of artifacts using an http connection during the build process. This was fixed in a related component, the Kotlin...