Skip to main content

Unprotected Transport of Credentials

CVE-2020-25175

Severity High
Score 9.8/10

Summary

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-523 - Unprotected Transport of Credentials

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

References

Advisory Timeline

  • Published