Description

Client information is transmitted over port 80 or HTTP, a channel that does not use encryption, so credentials and confidential information can be captured in plain text.

Impact

Compromise sensitive information that travels in plain text.

Recommendation

Deploy the application over the HTTPS secure channel using TLS.

Threat

Anonymous attacker on adjacent network running a MitM.

Expected Remediation Time

⏱️ 60 minutes.

Requirements

Fixes