CVE-2015-0943

Published: Aug 31, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Basware Banking (Maksuliikenne) before 9.10.0.0 does not encrypt communication between the client and the backend server, which allows man-in-the-middle attackers to obtain encryption keys, user credentials, and other sensitive information by sniffing the network or modify this traffic by inserting packets into the client-server data stream.

Affected (1)

Products: Basware: Banking

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Basware Banking	Up to 8.90.07

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://seclists.org/fulldisclosure/2015/Jul/120

Source: cret@cert.org

https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html

Source: cret@cert.org

http://seclists.org/fulldisclosure/2015/Jul/120

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.