CVE-2016-10641CWE-311

node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks

published June 4, 2018

CVSS
—
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00569 · 46.1th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2018-06-04T16:00Z
EPSS history
Timeline
  • 04 JUN 16:00Z
    node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks
    cvelistv5