Cleartext Transmission of Sensitive Information
| Property | |
|---|---|
| Language | java |
| Severity |  |
| CWE | CWE-319: Cleartext Transmission of Sensitive Information |
| OWASP | A03:2017 - Sensitive Data Exposure |
| Confidence Level | Medium |
| Impact Level | Medium |
| Likelihood Level | Medium |
Description#
The code sends HTTP requests using the HttpGet class over an unencrypted HTTP connection. This exposes any data sent or received—including sensitive information—to interception by attackers on the network.
Impact#
If exploited, attackers could eavesdrop on or modify data transmitted between the application and the server, potentially stealing credentials, personal data, or injecting malicious content. This can lead to data breaches, compromised user accounts, and loss of trust in your application.