KEPServerEX Vulnerability: Inadequate Protection of User Credentials Exposes Basic Authentication

KEPServerEX Vulnerability: Inadequate Protection of User Credentials Exposes Basic Authentication

CVE-2023-29447 · MEDIUM Severity

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.

Learn more about our Web App Pen Testing.