CVE-2019-10102

Published: Jul 3, 2019Modified: Jun 17, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30.

Affected (2)

Products: Jetbrains: Kotlin, Ktor

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Jetbrains Kotlin	Before 1.3.30
Jetbrains Ktor	Before 1.1.0

Related CWEs

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (4)

https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/

Source: cve@mitre.org

Vendor Advisory

https://security.netapp.com/advisory/ntap-20230818-0012/

Source: cve@mitre.org

https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://security.netapp.com/advisory/ntap-20230818-0012/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.