Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q6g6-cfvx-2c7g

Опубликовано: 25 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTPS and this feature is not configurable by the user.

The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTPS and this feature is not configurable by the user.

EPSS

Процентиль: 31%
0.00117
Низкий

8.8 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTPS and this feature is not configurable by the user.

EPSS

Процентиль: 31%
0.00117
Низкий

8.8 High

CVSS3

Дефекты

CWE-306