Non-encrypted confidential information - Hexadecimal
Description
The confidential information is encoded in hexadecimal allowing an attacker to view it in plain text when decoding it.
Impact
Obtain confidential information by decoding hexadecimal.
Recommendation
Use secure encryption methods to encrypt any sensitive information.
Threat
An attacker from an adjacent network performing a sniffing attack.
Expected Remediation Time
⏱️ 30 minutes.
Requirements
134 - Store passwords with salt135 - Passwords with random salt185 - Encrypt sensitive information229 - Request access credentials264 - Request authenticationFixes