CVE-2019-25278 — FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure
FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perfor…
Published: 2026-01-07 · CVSS: 9.1 · CVSS 4.0
FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7