CVE-2019-16067

NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application

published March 19, 2020

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication traffic in transit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00785 · 55.6th percentile
Published
2020-03-19T17:56Z
EPSS history
Timeline
  • 19 MAR 17:56Z
    NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application
    cvelistv5