CWE-5—J2EE Misconfiguration: Data Transmission Without Encryption

名称

J2EE Misconfiguration: Data Transmission Without Encryption

描述

Information sent over a network can be compromised while in transit. An attacker may be able to read or modify the contents if the data are sent in plaintext or are weakly encrypted.

常见后果

范围：

Confidentiality

影响：

Read Application Data

范围：

Integrity

影响：

Modify Application Data

相关 CWE

• CWE-319Cleartext Transmission of Sensitive InformationHigh