CVE-2019-3801 — Java Projects using HTTP to fetch dependencies
Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated m…
Published: 2019-04-25 · CVSS: 8.7 · CVSS 3.0
Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inject malicious code into the component.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7