CVE-2019-11770

In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTPS. Any of these artifacts could have been MITM to maliciously compromise them and infect the build artifacts that were produced. Additionally, if any of thes...

Code injection

In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTPS. Any of these artifacts could have been MITM to maliciously compromise them and infect the build artifacts that were produced. Additionally, if any of thes...

CVE-2019-11770

The CVE-2019-11770 entry concerns Eclipse Buildship versions prior to 3.1.1, where build files resolve dependencies over HTTP instead of HTTPS. This creates a MITM risk: artifacts could be compromised in transit, potentially infecting build artifacts and, if dependencies were tainted, affecting d...