CoreCVE
Back

HIGH

NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application

Published Mar 19, 2020

Description

NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication traffic in transit.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-319

CWE-522

Insufficiently Protected Credentials

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Mar 19, 2020
Updated Aug 5, 2024
Reserved Sep 6, 2019
Link CVE-2019-16067

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-16067

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Mar 19, 2020
Updated Aug 5, 2024
Link EUVD-2019-6929

GitHub

No data