Maven package
org.eclipse.kura/org.eclipse.kura.web2
pkg:maven/org.eclipse.kura/org.eclipse.kura.web2
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-3046 | — | >= 2.0.600, <= 2.4.0 | — | Apr 9, 2024 | In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the ses |
- CVE-2024-3046Apr 9, 2024affected >= 2.0.600, <= 2.4.0
In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the ses