Test ID:	1.3.6.1.4.1.25623.1.0.108440
Category:	Web application abuses
Title:	Cleartext Transmission of Sensitive Information via HTTP
Summary:	The host / application transmits sensitive information (username, passwords) in; cleartext via HTTP.
Description:	Summary: The host / application transmits sensitive information (username, passwords) in cleartext via HTTP. Vulnerability Impact: An attacker could use this situation to compromise or eavesdrop on the HTTP communication between the client and the server using a man-in-the-middle attack to get access to sensitive data like usernames or passwords. Affected Software/OS: Hosts / applications which doesn't enforce the transmission of sensitive data via an encrypted SSL/TLS connection. Solution: Enforce the transmission of sensitive data via an encrypted SSL/TLS connection. Additionally make sure the host / application is redirecting all users to the secured SSL/TLS connection before allowing to input sensitive data into the mentioned functions. CVSS Score: 4.8 CVSS Vector: AV:A/AC:L/Au:N/C:P/I:P/A:N
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.