CVE-2022-1524

HIGH

illumina local_run_manager < 3.1 - Cleartext Transmission of Sensitive Information

Title source: llm

LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

CVSS v3 7.4

EPSS 0.0026

EPSS Percentile 17.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-319

Status published

Products (1)

illumina/local_run_manager 1.3 - 3.1

Published Jun 24, 2022

Tracked Since Feb 18, 2026