Password Transmitted over HTTP
Severity:
High
Summary
Invicti detected that password data is being transmitted over HTTP.
Impact
If an attacker can intercept network traffic, he/she can steal users' credentials.
Remediation
All sensitive data should be transferred over HTTPS rather than HTTP. Forms should be served over HTTPS. All aspects of the application that accept user input, starting from the login process, should only be served over HTTPS.
Required Skills for Successful Exploitation
Actions To Take
- See the remedy for solution.
- Move all of your critical forms and pages to HTTPS and do not serve them over HTTP.
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
