CVE-2022-1524CWE-319

3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319

High · published June 24, 2022

CVSS v3.1
7.4
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.3th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2022-06-24T15:00Z
EPSS history
Timeline
  • 24 JUN 15:00Z
    3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
    cvelistv5