CVE-2016-10631

CVE-2016-10631 impacts the jvminstall module, which is designed for downloading and unpacking JVMs. This vulnerability stems from the module's use of unencrypted HTTP for binary resource downloads, making it susceptible to Man-in-the-Middle (MITM) attacks. With a CVSS score of 8.1 (HIGH), successful exploitation could lead to remote code execution (RCE) if an attacker intercepts and swaps the legitimate binary with a malicious one. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.