Unscored CVE-2019-10101 EUVD-2019-2144GHSA-p2g6-rgr3-jm3m

JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an…

Published Jul 3, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.

References

https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
https://medium.com/bugbountywriteup/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb
https://security.netapp.com/advisory/ntap-20230818-0012/