CVE-2019-25278CWE-319

FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure

Critical · published January 7, 2026

CVSS v4.0
9.1
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.

The record
Technical detail
CVSS v4.0
9.1 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00330 · 24.8th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-01-07T23:09Z
EPSS history
Timeline
  • 07 JAN 23:09Z
    FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure
    cvelistv5