CVE-2019-10103

Published: Jul 3, 2019Modified: Jun 17, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.

Affected (1)

Products: Jetbrains: Kotlin

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jetbrains Kotlin	Before 1.3.30

Related CWEs

Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

References (4)

https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/

Source: cve@mitre.org

Vendor Advisory

https://security.netapp.com/advisory/ntap-20230818-0012/

Source: cve@mitre.org

https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://security.netapp.com/advisory/ntap-20230818-0012/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.