CVE-2021-35246 – Unprotected Transport of Credentials (HSTS) Vulnerability

https://notcve.org/view.php?id=CVE-2021-35246

23 Nov 2022 — The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's network traffic could bypass the application's use of SSL/TLS encryption and use the application as a platform for attacks against its users. La aplicación no impide que los usuarios se conecten a ella a través de conexiones no cifradas. Un atacante capaz de modificar el tráfico de red de un usuario legítimo podría evitar el uso de cifrado SSL/TLS por parte de la aplicaci... • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35246 • CWE-319: Cleartext Transmission of Sensitive Information •