CVE-2016-5786

High

Published: 13/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in the OmniView web application, version 1.2, related to the transmission of credentials using the HTTP protocol. This could allow an attacker to sniff these credentials, leading to account compromise.

Risk Assessment

Compromise of credentials may lead to unauthorized access to user accounts, posing a significant security threat to the organization.

Recommendation

It is recommended to migrate to a more secure protocol, such as HTTPS, to protect transmitted credentials.

Other vulnerabilities in OmniMetrix OmniView, Version 1.2

CVE-2016-5801High
An issue was discovered in OmniMetrix OmniView, Version 1.2 related to insufficient password requirements. This may allow an attacker to gain access to the web application by brute forcing account passwords.

Original NVD description (English source)

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.