Lucene search
GitHub Advisory DatabaseGHSA-QV6X-53JJ-VW59HistoryMay 21, 2024 - 9:30 p.m.
NASA AIT-Core uses unencrypted channels to exchange data over the network
2024-05-2121:30:27
CWE-311
GitHub Advisory Database
github.com
7
nasa
ait-core
v2.5.2
unencrypted
data
exchange
network
attackers
man-in-the-middle
software
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
7.3
Confidence
High
EPSS
0
Percentile
16.0%
NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack.
Affected configurations
Node
ait-coreRange≤2.5.2
Related
veracode
veracode
Cleartext Transmission Of Sensitive Information
2024-05-24 08:46:47
osv
osv
NASA AIT-Core uses unencrypted channels to exchange data over the network
2024-05-21 21:30:27
vulnrichment
vulnrichment
CVE-2024-35061
2024-05-21 00:00:00
nvd
nvd
CVE-2024-35061
2024-05-21 19:15:10
cve
cve
CVE-2024-35061
2024-05-21 19:15:10
cvelist
cvelist
CVE-2024-35061
2024-05-21 00:00:00
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
7.3
Confidence
High
EPSS
0
Percentile
16.0%
Related for GHSA-QV6X-53JJ-VW59