CVE-2019-16063 — Cleartext Transmission of Sensitive Info in Enigma Network Management Solution

CWE-319 — Cleartext Transmission of Sensitive InfoCWE-311 — Missing Encryption of Sensitive Data3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 59.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netsas Enigma Network Management Solution
Timeline
PublishedMar 19
Latest updateMay 24

Description

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xv9j-g2h4-7rg3: NETSAS Enigma NMS 65↗2022-05-24
▶
CVEList
CVE-2019-16063: NETSAS Enigma NMS 65↗2020-03-19
▶
CVE-2019-16063 — HIGH severity | cvebase