CVE-2017-16041
04.06.2018, 19:29
ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ikst_project | ikst | 𝑥 < 1.1.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-311 - Missing Encryption of Sensitive DataThe software does not encrypt sensitive or critical information before storage or transmission.
- CWE-319 - Cleartext Transmission of Sensitive InformationThe software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.