Cleartext Transmission Of Sensitive Information

2024-05-2408:46:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

sensitive information

vulnerable

unencrypted channels

network

man-in-the-middle

6.7 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

NASA AIT-Core is vulnerable to Cleartext Transmission of Sensitive Information. The vulnerability is due to using unencrypted channels to exchange data over the network, which allows an attacker to conduct a Man-in-the-Middle attack.

CPENameOperatorVersion
ait-corele2.5.2
ait-corele2.5.2

CPE	Name	Operator	Version
	ait-core	le	2.5.2
	ait-core	le	2.5.2

References

github.com/advisories/GHSA-qv6x-53jj-vw59

www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze