VULNERABILITY INTELLIGENCE

CVE-2019-10102

CVSS score8.1 HIGH
EPSS probability0.82%
CISA KEVNot currently listed
Published2019-07-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references