CVE-2021-35246 | BDVDB-2026-189244 Detail
SolarWindsEngineer's Toolset
Description#
The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's network traffic could bypass the application's use of SSL/TLS encryption and use the application as a platform for attacks against its users.
Impact#
CAPEC-94 Man in the Middle Attack
Weaknesses#
- CWE-319 Cleartext Transmission of Sensitive Information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.