Description
In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.
Remediation
References
http://www.securityfocus.com/bid/107844
https://bugs.eclipse.org/bugs/show_bug.cgi?id=545834
Related Vulnerabilities
CVE-2023-46495 Vulnerability in npm package @evershop/evershop
CVE-2022-3978 Vulnerability in npm package nodebb
CVE-2022-43421 Vulnerability in maven package org.jenkins-ci.plugins:tuleap-git-branch-source
CVE-2022-0686 Vulnerability in npm package url-parse
CVE-2017-18077 Vulnerability in maven package org.webjars.npm:brace-expansion