J2EE Misconfiguration: Data Transmission Without Encryption
CWE-5
The product uses J2EE with a configuration that transmits data without encryption.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.5.
How this weakness is prevented
- System Configuration: The product configuration should ensure that SSL or an encryption mechanism of equivalent strength and vetted reputation is used for all access-controlled pages.
Latest J2EE Misconfiguration: Data Transmission Without Encryption vulnerabilities
- 7.5 High severity
Apache Mynewt NimBLE: J2EE Misconfiguration: Data Transmission Without Encryption
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to
- 7.5 High severity
Hub M2 Firmware: J2EE Misconfiguration: Data Transmission Without Encryption
Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 automatically collect and upload unencrypted sensitive information. Note that this occurs without disclosure or consent from the manufacturer.