Description
In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.
Remediation
References
http://www.securityfocus.com/bid/107844
https://bugs.eclipse.org/bugs/show_bug.cgi?id=545834
Related Vulnerabilities
CVE-2021-23346 Vulnerability in npm package html-parse-stringify2
CVE-2022-36437 Vulnerability in maven package com.hazelcast.jet:hazelcast-jet-enterprise
CVE-2020-7788 Vulnerability in maven package org.webjars.npm:ini
CVE-2022-48285 Vulnerability in maven package org.webjars:jszip
CVE-2018-11696 Vulnerability in maven package org.webjars.npm:node-sass