test project » import-test

{code:java}
############################################################ # host: itg-inventory-dev.ase.cit.tum.de, ip: 131.159.89.188, tcp port: 80 + 4.8 - Cleartext Transmission of Sensitive Information via HTTP + 2023-05-15T14:08:22Z - e0bf1837-a869-47d5-8cdc-d143c74e5b68 - 1.3.6.1.4.1.25623.1.0.108440 summary: The host / application transmits sensitive information (username, passwords) in cleartext via HTTP. problem: The following input fields where identified (URL:input name): http://itg-inventory-dev.ase.cit.tum.de/setup/user:password impact: An attacker could use this situation to compromise or eavesdrop on the HTTP communication between the client and the server using a man-in-the-middle attack to get access to sensitive data like usernames or passwords. solution: Workaround: Enforce the transmission of sensitive data via an encrypted SSL/TLS connection. Additionally make sure the host / application is redirecting all users to the secured SSL/TLS connection before
{code}