CVE-2019-10240 - AskarLabs CVE Database

CVE-2019-10240

Vendor The Eclipse Foundation

Product Eclipse hawkBit

Weakness CWE-829 · Inclusion from untrusted sphere

Published April 3, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.

Key dates

02Disclosure timeline

April 3, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-10240 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/829.html

Related vulnerabilities

04Related CVE

CVE-2022-23630 Dependency verification bypass in Gradle CVE-2025-62726 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook CVE-2026-5241 Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability CVE-2026-5843 Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading