GHSA-J336-34Q7-CGJ3 Downloads Resources over HTTP in healthcenter

Affected versions of healthcenter insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

Downloads Resources over HTTP in healthcenter

Affected versions of healthcenter insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

Man-in-the-Middle (MitM)

appmetrics-dash is vulnerable to man-in-the-middle attacks. Download links for Javascript files were made over an insecure HTTP channel. An attacker will be able to inject Javascript code or modify server response in a man-in-the-middle attack...