Description (CNA)
STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens. This issue was fixed in version 9.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy / STER | affected 0 before 9.5 |
CWE
CWE-319
References
- https://cert.pl/posts/2026/05/CVE-2026-25606
- https://www.ciop.pl/CIOPPortalWAR/appmanager/ciop/pl?_nfpb=true&_pageLabel=P52000165211572544981480
ADP enrichment
No English description supplied.
No references supplied.