CVE-2019-16067

NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication traffic in transit.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.78% chance of exploitation in the next 30 days, 54th percentile

Published

2020-03-19

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://www.mogozobo.com/?p=3647

References

• CVE Record
• NVD entry

Related

• CVE-2019-16066
• CVE-2019-16068
• CVE-2019-16065
• CVE-2019-16069
• CVE-2019-16064
• CVE-2019-16070