Cleartext Transmission of Sensitive Information
| Property | |
|---|---|
| Language | java |
| Severity |  |
| CWE | CWE-319: Cleartext Transmission of Sensitive Information |
| OWASP | A03:2017 - Sensitive Data Exposure |
| Confidence Level | High |
| Impact Level | Medium |
| Likelihood Level | Medium |
Description#
The code is creating Java sockets (ServerSocket or Socket) without encryption, which means data sent over the network is transmitted in plain text. This exposes sensitive information to anyone who can intercept the network traffic.
Impact#
If exploited, attackers could eavesdrop on or tamper with data exchanged between clients and servers, leading to exposure of credentials, personal information, or other confidential data. This can result in data breaches, identity theft, or unauthorized access to the application.