Description (CNA)
An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bachmann Visutec GmbH / Atvise | affected 3.5.4; affected 3.6; affected 3.7 |
CWE
CWE-319
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.