Security Advisory
CVE-2019-25278
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.