CWE-1428: Reliance on HTTP instead of HTTPS
The product provides or relies on use of HTTP communications when HTTPS is available.
A kind of CWE-319 Cleartext Transmission of Sensitive Information.
From the CWE List. © The MITRE Corporation.
Newest
- sogou input method Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution 8.9 High
- zakład ubezpieczeń społecznych płatnik Lack of traffic encryption in Płatnik 2.3 Low
- f&f filipowski mh-developer Cleartext Transmission of Sensitive Information in mH-DEVELOPER 6.0 Medium
- hitachi energy promod v PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the... 7.0 High
- amd management console (amc), ryzen™ master, µprof +1 more +3 more The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a... 7.7 High