CVE-2019-10240

Eclipse hawkBit is affected: versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin-based UI over HTTP instead of HTTPS, creating a MITM risk where dependent artifacts could be compromised and infected. Multiple sources (RH, OSV, NVD, Gemein) corroborate that build artifacts may ...