10047—HTTPS Content Available via HTTP

PUBLISHEDsecurity alertLow

Active

Metadata

Alert ID:: 10047
Risk:: Low
Type:: Active
CWE:: CWE-311Missing Encryption of Sensitive Data

摘要

Content which was initially accessed via HTTPS (i.e.: using SSL/TLS encryption) is also accessible via HTTP (without encryption).

解决方案

Ensure that your web server, application server, load balancer, etc. is configured to only serve such content via HTTPS. Consider implementing HTTP Strict Transport Security.

其他信息

ZAP attempted to connect via: http://example.org/

参考

browse all alerts