VYPR
Unrated severityNVD Advisory· Published Aug 31, 2015· Updated May 6, 2026

CVE-2015-0943

CVE-2015-0943

Description

Basware Banking (Maksuliikenne) before 9.10.0.0 does not encrypt communication between the client and the backend server, which allows man-in-the-middle attackers to obtain encryption keys, user credentials, and other sensitive information by sniffing the network or modify this traffic by inserting packets into the client-server data stream.

Affected products

1
  • cpe:2.3:a:basware:banking:*:*:*:*:*:*:*:*
    Range: <=8.90.07

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.