In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.
{
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "4.0.0"
}
],
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:eclipse:kura:*:*:*:*:*:*:*:*"
}