CVE-2015-0943

Basware Banking < 8.90.07 - Exposure of Sensitive Information via Unencrypted Client-Server Communication

Title source: llm
STIX 2.1

Description

Basware Banking (Maksuliikenne) before 9.10.0.0 does not encrypt communication between the client and the backend server, which allows man-in-the-middle attackers to obtain encryption keys, user credentials, and other sensitive information by sniffing the network or modify this traffic by inserting packets into the client-server data stream.

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2015/Jul/120

Scores

EPSS 0.0053
EPSS Percentile 41.2%

Details

CWE
CWE-200 CWE-254
Status published
Products (1)
basware/banking < 8.90.07
Published Aug 31, 2015
Tracked Since Feb 18, 2026