SYM_PY_0080 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Cleartext Transmission of Sensitive Information

Property Value
Language python
Severity low
CWE CWE-319: Cleartext Transmission of Sensitive Information
OWASP A03:2017 - Sensitive Data Exposure
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

The code is using 'URLopener.open' with a URL that starts with 'http://', which creates an unsecured connection. This allows data to be sent and received without encryption, making it vulnerable to interception.

Impact

Sensitive information such as credentials or personal data could be exposed to attackers if intercepted over an unencrypted connection. This may lead to data breaches, account compromise, or leakage of confidential information.