PT-2020-18477

Name of the Vulnerable Software and Affected Versions Scheduler for TAS versions prior to 1.4.0 Description The issue allows plaintext transmission of a UAA client token over a non-TLS connection, which depends on the configuration of the MySQL server used to cache the token. If the token is...

CVE-2020-5426: Cleartext Transmission of Sensitive Information

Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server which is used to cache a UAA client token used by the service. If intercepted the token can give ...