[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fczz131MC_gHc1STPdpbClf8ZN_li2vI1mDS7Ld6lft0":3,"g5a-risk:CVE-2021-41034":104},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":47,"weaknesses":54,"weaknessesCount":47,"isActivelyExploited":63,"cisaInfo":25,"otxData":25,"relatedBlogPosts":64,"seoMetadata":65,"configurations":90,"relatedVendorCves":100,"notableEvents":101},"CVE-2021-41034","What is CVE-2021-41034?","The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerable to MITM attacks that allow the replacement of the original binaries with arbitrary ones. The stacks involved are Java 8 (alpine and centos), Android and PHP. The vulnerability is not exploitable at runtime but only when building Che.","The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of suc...","2021-09-29T22:15:07.367","2021-10-07T20:35:06.457",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.00407,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"eclipse","che","*","cpe:2.3:a:eclipse:che:*:*:*:*:*:*:*:*",1,[49],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fbugs.eclipse.org\u002Fbugs\u002Fshow_bug.cgi?id=540989","Eclipse",[53],"Vendor Advisory",[55],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-924","Improper Enforcement of Message Integrity During Transmission in a Communication Channel","The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.","Attackers might be able to modify the message and spoof the endpoint by interfering with the data as it crosses the network or by redirecting the connection to a system under their control.","Incomplete","Base","Simple",false,[],{"title":66,"metaDescription":67,"keywords":68,"canonicalUrl":69,"structuredData":70},"What is CVE-2021-41034? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-41034, a high severity cyber security vulnerability from 2021. The build of some language stacks of Eclipse Che version 6 ...","CVE-2021-41034, CVE-2021-41034 vulnerability, CVE-2021-41034 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, eclipse security, che vulnerability","\u002Fwhat-is\u002Fcve-2021-41034",{"@context":71,"@type":72,"headline":66,"description":67,"datePublished":10,"dateModified":11,"author":73,"publisher":77,"about":81,"mainEntityOfPage":85,"articleSection":88,"keywords":89},"https:\u002F\u002Fschema.org","TechArticle",{"@type":74,"name":75,"url":76},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":74,"name":75,"url":76,"logo":78},{"@type":79,"url":80},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":82,"name":6,"description":83,"additionalType":84},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":86,"@id":87},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-41034","Cybersecurity","CVE-2021-41034, CVE-2021-41034 vulnerability, CVE-2021-41034 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[91],{"Operator":25,"Negate":25,"Nodes":92},[93],{"Operator":94,"Negate":25,"CPEMatch":95},"OR",[96],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":97,"VersionStartExcluding":25,"VersionStartIncluding":98,"VersionEndExcluding":99,"VersionEndIncluding":25},"27CF1583-CC8A-408D-977D-5039879B886C","6.0.0","7.0.0",[],[],{"lastModified":11,"cacheTime":103,"version":31},1792275695519,{"score":105,"band":106,"action":107,"scoredAt":108},46,"Medium","Plan remediation","2026-10-16T06:52:09.085312+00:00"]