Description
STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens.
This issue was fixed in version 9.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy | STER | < 9.5 | 9.5 |