[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2019-0231":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":25,"references":27,"score":30,"epss_score":31,"epss_percentile":32,"is_kev":33,"cisa_kev_date_added":34,"cisa_kev_due_date":34,"cisa_ssvc":35,"attack_mappings":41,"exploits":66},234187,"CVE-2019-0231","EUVD-2022-2588","Cleartext Transmission of Sensitive Information in Apache MINA\n\nHandling of the close_notify SSL\u002FTLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.","2022-05-24T16:57:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":17,"privilegesRequired":17,"confidentialityImpact":15},"UNCHANGED","3.1",7.5,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","NONE","LOW",true,[21],"CWE-319",[23,24],"cpe:2.3:a:apache:mina:2.0.20:*:*:*:*:*:*:*","cpe:2.3:a:apache:mina:2.1.1:*:*:*:*:*:*:*",[26],"Apache Mina",[28,29],"http:\u002F\u002Fmina.apache.org\u002Fmina-project\u002Findex.html#mina-211-mina-2021-released-posted-on-april-14-2019","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2019-0231",0.57,0.02125,0.81804,false,null,{"timestamp":34,"automatable":36,"tech_impact":37,"exploitation":38,"cisa_decision":39,"cisa_remediation_timeline":40},"no","partial","none",{},"FSU",[42,48,58],{"name":43,"source":44,"tactics":45,"technique_id":47},"Exploit Public-Facing Application","attack_vector",[46],"initial-access","T1190",{"name":49,"source":50,"cwe_ids":51,"tactics":52,"capec_ids":55,"technique_id":57},"Network Sniffing","capec",[21],[53,54],"credential-access","discovery",[56],"CAPEC-65","T1040",{"name":59,"source":50,"cwe_ids":60,"tactics":61,"capec_ids":63,"technique_id":65},"Credential API Hooking",[21],[62,53],"collection",[64],"CAPEC-383","T1056.004",[]]