Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q62c-3fc5-9g84

Опубликовано: 16 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect to HTTPS as intended. As a result, an attacker with network access could intercept or modify user credentials and session-related data via passive monitoring or man-in-the-middle attacks.

HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect to HTTPS as intended. As a result, an attacker with network access could intercept or modify user credentials and session-related data via passive monitoring or man-in-the-middle attacks.

EPSS

Процентиль: 3%
0.00017
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVSS3: 5.9
nvd
около 2 месяцев назад

HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect to HTTPS as intended. As a result, an attacker with network access could intercept or modify user credentials and session-related data via passive monitoring or man-in-the-middle attacks.

EPSS

Процентиль: 3%
0.00017
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-319