The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-255,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| henri_wahl | nagstamon | 0.9.0 |
| henri_wahl | nagstamon | 0.9.4 |
| henri_wahl | nagstamon | 0.5.9 |
| henri_wahl | nagstamon | 0.9.2 |
| henri_wahl | nagstamon | 0.8.2 |
| henri_wahl | nagstamon | 0.7.0 |
| henri_wahl | nagstamon | 0.5.4 |
| henri_wahl | nagstamon | 0.5.6 |
| henri_wahl | nagstamon | 0.5.10 |
| henri_wahl | nagstamon | 0.6.1 |
| henri_wahl | nagstamon | 0.9.3 |
| henri_wahl | nagstamon | 0.5.13 |
| henri_wahl | nagstamon | 0.9.5 |
| henri_wahl | nagstamon | 0.9.8 |
| henri_wahl | nagstamon | 0.5.7 |
| henri_wahl | nagstamon | 0.9.1 |
| henri_wahl | nagstamon | * |
| henri_wahl | nagstamon | 0.5.3 |
| henri_wahl | nagstamon | 0.6 |
| henri_wahl | nagstamon | 0.5.5 |
| henri_wahl | nagstamon | 0.6.2 |
| henri_wahl | nagstamon | 0.5.2 |
| henri_wahl | nagstamon | 0.9.6.1 |
| henri_wahl | nagstamon | 0.5.11 |
| henri_wahl | nagstamon | 0.8.0 |
| henri_wahl | nagstamon | 0.9.6 |
| henri_wahl | nagstamon | 0.9.7 |
| henri_wahl | nagstamon | 0.9.7.1 |
| henri_wahl | nagstamon | 0.8.1 |
| henri_wahl | nagstamon | 0.5.8 |