The Clorius Controls Java web client before 01.00.0009g... · CVE-2014-9199 · GitHub Advisory Database · GitHub

The Clorius Controls Java web client before 01.00.0009g...

Moderate severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Sep 6, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.

References

Published by the National Vulnerability Database

Jan 17, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Sep 6, 2025

Weaknesses

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Learn more on MITRE.

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required. Learn more on MITRE.