Test Methods ( Detailed Overview )

Here is a list of every test performed by Web Scan Service.

Logins Sent Over Unencrypted Connection

Remediation Task

Encrypt data

WASC Classification

Information Disclosure: Information Leakage

Affected Products

This issue may affect different types of products

Technical Description

Login information are sent over a normal HTTP connection. Logins should always be sent in an encrypted way. Otherwise information can be easily stolen by sniffing.

Fix Recommendation

Either you should use SSL or any other encryption protocol to prevent the data being stolen.