Weakness (CWE)
CWE-5: J2EE Misconfiguration: Data Transmission Without Encryption
Variant Draft
The product uses J2EE with a configuration that transmits data without encryption.
How to prevent it (1 mitigation)
-
System Configuration
The product configuration should ensure that SSL or an encryption mechanism of equivalent strength and vetted reputation is used for all access-controlled pages.
Source: MITRE CWE-5
0 results · Clear filters · Feed
Nothing found.