CVE-2021-29397

Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote local user to intercept users credentials transmitted in cleartext over HTTP.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-02-04

Last modified

2024-08-03

Weaknesses

CWE-319

Affected products

• Northstar Club Management (Globalnorthstar)

References

• https://Ardent-Security.com
• https://ardent-security.com/en/advisory/asa-2021-05/