CVE-2019-25278

Publication date

2026-01-07 23:09:59

Family

VulnCheck

State

PUBLISHED

Description

FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.