Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wg6r-jqr9-2745

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.

The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS

Процентиль: 73%
0.00787
Низкий

Дефекты

CWE-522

Связанные уязвимости

nvd
больше 13 лет назад

The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS

Процентиль: 73%
0.00787
Низкий

Дефекты

CWE-522