CVE-2019-12728 - Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service

Back Back to CVE browser

HIGH

Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service

Published Jun 4, 2019

8.1

HIGH

CVSS 3.1

EPSS 0.83%

Description

Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-494

CWE-669

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4800
Advisory
https://github.com/advisories/GHSA-pmxf-4v8c-rwr7
Advisory
https://github.com/grails/grails-core/issues/11250
x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12728
https://objectcomputing.com/news/2019/05/30/possible-grails-mitm-vulnerability
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4800		Advisory
https://github.com/advisories/GHSA-pmxf-4v8c-rwr7		Advisory
https://github.com/grails/grails-core/issues/11250		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12728
https://objectcomputing.com/news/2019/05/30/possible-grails-mitm-vulnerability		x_refsource_MISCThird Party Advisory