Man-in-the-Middle (MitM)

2019-04-2309:12:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

47.8%

JSON

Eclipse Vorto is vulnerable to man-in-the-middle (MitM). The attack exists because it does not use encrypted HTTP channel download its eclipse dependencies, allowing a remote attacker to intercept the HTTP traffic during the installation of dependencies.

CPENameOperatorVersion
vorto parentle0.10.0

CPE	Name	Operator	Version
	vorto parent	le	0.10.0

References

bugs.eclipse.org/bugs/show_bug.cgi?id=546622

github.com/eclipse/vorto/issues/1434

0.001 Low

EPSS

Percentile

47.8%

JSON

Related for VERACODE:13677