stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-26346 (severity: MEDIUM, weakness: CWE-190)
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
CVE-2021-26347 (severity: MEDIUM, weakness: CWE-1284)
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
CVE-2021-26348 (severity: MEDIUM, weakness: NVD-CWE-Other)
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
CVE-2021-26349 (severity: MEDIUM, weakness: NVD-CWE-Other)
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).
CVE-2021-26350 (severity: MEDIUM, weakness: CWE-367)
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.
CVE-2021-26351 (severity: MEDIUM, weakness: CWE-20)
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.
CVE-2021-26352 (severity: MEDIUM, weakness: CWE-119)
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.
CVE-2021-26353 (severity: HIGH, weakness: CWE-665)
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
CVE-2021-26354 (severity: MEDIUM, weakness: CWE-120)
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity.
CVE-2021-26355 (severity: MEDIUM, weakness: CWE-693)
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-of-service.
CVE-2021-26356 (severity: HIGH, weakness: CWE-367)
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.
CVE-2021-26360 (severity: HIGH, weakness: CWE-284)
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
CVE-2021-26361 (severity: MEDIUM, weakness: NVD-CWE-Other)
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.
CVE-2021-26362 (severity: HIGH, weakness: NVD-CWE-Other)
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.
CVE-2021-26363 (severity: MEDIUM, weakness: NVD-CWE-Other)
A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.
CVE-2021-26364 (severity: MEDIUM, weakness: CWE-119)
Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.
CVE-2021-26365 (severity: HIGH, weakness: CWE-125)
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.
CVE-2021-26366 (severity: HIGH, weakness: NVD-CWE-Other)
An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.
CVE-2021-26367 (severity: MEDIUM, weakness: NVD-CWE-Other)
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
CVE-2021-26368 (severity: MEDIUM, weakness: CWE-345)
Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.
CVE-2021-26369 (severity: HIGH, weakness: CWE-119)
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
CVE-2021-26370 (severity: HIGH, weakness: CWE-20)
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
CVE-2021-26371 (severity: MEDIUM, weakness: NVD-CWE-Other)
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.
CVE-2021-26372 (severity: MEDIUM, weakness: CWE-119)
Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.
CVE-2021-26373 (severity: MEDIUM, weakness: CWE-20)
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service.
CVE-2021-26375 (severity: MEDIUM, weakness: NVD-CWE-Other)
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.
CVE-2021-26376 (severity: MEDIUM, weakness: NVD-CWE-Other)
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service.
CVE-2021-26378 (severity: MEDIUM, weakness: CWE-119)
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.
CVE-2021-26379 (severity: CRITICAL, weakness: NVD-CWE-Other)
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.
CVE-2021-26382 (severity: MEDIUM, weakness: NVD-CWE-Other)
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
CVE-2021-26384 (severity: HIGH, weakness: CWE-125)
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.
CVE-2021-26386 (severity: HIGH, weakness: CWE-787)
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.
CVE-2021-26387 (severity: LOW, weakness: CWE-863)
Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.
CVE-2021-26388 (severity: MEDIUM, weakness: CWE-125)
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.
CVE-2021-26390 (severity: MEDIUM, weakness: NVD-CWE-Other)
A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.
CVE-2021-26391 (severity: HIGH, weakness: CWE-347)
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.
CVE-2021-26392 (severity: HIGH, weakness: CWE-787)
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.
CVE-2021-26393 (severity: MEDIUM, weakness: CWE-401)
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.
CVE-2021-26396 (severity: MEDIUM, weakness: CWE-345)
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.
CVE-2021-26397 (severity: HIGH, weakness: NVD-CWE-Other)
Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability.
CVE-2021-26398 (severity: HIGH, weakness: CWE-787)
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.
CVE-2021-26400 (severity: MEDIUM, weakness: NVD-CWE-Other)
AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage.
CVE-2021-26401 (severity: MEDIUM, weakness: NVD-CWE-Other)
LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.
CVE-2021-26402 (severity: HIGH, weakness: CWE-787)
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.
CVE-2021-26403 (severity: MEDIUM, weakness: CWE-345)
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.
CVE-2021-26404 (severity: MEDIUM, weakness: CWE-20)
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.
CVE-2021-26406 (severity: HIGH, weakness: NVD-CWE-Other)
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service.
CVE-2021-26407 (severity: MEDIUM, weakness: CWE-330)
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure.
CVE-2021-26408 (severity: HIGH, weakness: NVD-CWE-Other)
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
CVE-2021-26409 (severity: HIGH, weakness: CWE-120)
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity.
CVE-2021-26411 (severity: HIGH, weakness: CWE-416)
Internet Explorer Memory Corruption Vulnerability
CVE-2021-26412 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26413 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Installer Spoofing Vulnerability
CVE-2021-26414 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows DCOM Server Security Feature Bypass
CVE-2021-26415 (severity: HIGH, weakness: CWE-20)
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-26416 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Denial of Service Vulnerability
CVE-2021-26417 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Overlay Filter Information Disclosure Vulnerability
CVE-2021-26418 (severity: HIGH, weakness: CWE-290)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-26419 (severity: HIGH, weakness: CWE-787)
Scripting Engine Memory Corruption Vulnerability
CVE-2021-26420 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-26421 (severity: HIGH, weakness: NVD-CWE-Other)
Skype for Business and Lync Spoofing Vulnerability
CVE-2021-26422 (severity: HIGH, weakness: NVD-CWE-Other)
Skype for Business and Lync Remote Code Execution Vulnerability
CVE-2021-26423 (severity: HIGH, weakness: NVD-CWE-Other)
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-26424 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-26425 (severity: HIGH, weakness: CWE-59)
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-26426 (severity: HIGH, weakness: CWE-59)
Windows User Account Profile Picture Elevation of Privilege Vulnerability
CVE-2021-26427 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26428 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Sphere Information Disclosure Vulnerability
CVE-2021-26429 (severity: HIGH, weakness: NVD-CWE-Other)
Azure Sphere Elevation of Privilege Vulnerability
CVE-2021-26430 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Sphere Denial of Service Vulnerability
CVE-2021-26431 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
CVE-2021-26432 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2021-26433 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2021-26434 (severity: HIGH, weakness: CWE-732)
Visual Studio Elevation of Privilege Vulnerability
CVE-2021-26435 (severity: HIGH, weakness: CWE-787)
Windows Scripting Engine Memory Corruption Vulnerability
CVE-2021-26436 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-26437 (severity: LOW, weakness: NVD-CWE-Other)
Visual Studio Code Spoofing Vulnerability
CVE-2021-26439 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge for Android Information Disclosure Vulnerability
CVE-2021-26441 (severity: HIGH, weakness: CWE-269)
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-26442 (severity: HIGH, weakness: NVD-CWE-Other)
Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2021-26443 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVE-2021-26444 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure RTOS Information Disclosure Vulnerability
CVE-2021-26461 (severity: CRITICAL, weakness: CWE-190)
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
CVE-2021-26471 (severity: CRITICAL, weakness: NVD-CWE-Other)
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php accepts a command argument. Using this command argument an unauthenticated attacker can execute arbitrary shell commands.
CVE-2021-26472 (severity: CRITICAL, weakness: CWE-78)
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges.
CVE-2021-26473 (severity: CRITICAL, weakness: CWE-434)
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitrary files in the context of the web server process. These files can then be executed remotely by calling the file via the web server.
CVE-2021-26474 (severity: HIGH, weakness: CWE-352)
Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in this family may be affected too.)
CVE-2021-26475 (severity: MEDIUM, weakness: CWE-79)
EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.
CVE-2021-26476 (severity: CRITICAL, weakness: CWE-78)
EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.
CVE-2021-26504 (severity: HIGH, weakness: CWE-22)
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.
CVE-2021-26505 (severity: CRITICAL, weakness: CWE-1321)
Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function.
CVE-2021-26528 (severity: CRITICAL, weakness: CWE-787)
The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
CVE-2021-26529 (severity: CRITICAL, weakness: CWE-787)
The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
CVE-2021-26530 (severity: CRITICAL, weakness: CWE-787)
The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
CVE-2021-26539 (severity: MEDIUM, weakness: NVD-CWE-Other)
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.
CVE-2021-26540 (severity: MEDIUM, weakness: NVD-CWE-Other)
Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts with "/\\example.com".
CVE-2021-26541 (severity: CRITICAL, weakness: CWE-78)
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.
CVE-2021-26543 (severity: HIGH, weakness: CWE-78)
The "gitDiff" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. The issue has been resolved in version 1.0.5.
CVE-2021-26544 (severity: MEDIUM, weakness: CWE-79)
Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating.
CVE-2021-26549 (severity: MEDIUM, weakness: CWE-79)
An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site.
CVE-2021-26550 (severity: MEDIUM, weakness: CWE-312)
An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.
CVE-2021-26551 (severity: HIGH, weakness: CWE-94)
An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module.
CVE-2021-26556 (severity: HIGH, weakness: CWE-426)
When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.
CVE-2021-26557 (severity: HIGH, weakness: CWE-426)
When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.
CVE-2021-26558 (severity: HIGH, weakness: CWE-502)
Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.
CVE-2021-26559 (severity: MEDIUM, weakness: CWE-284)
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg`. This allowed a privilege escalation attack. This issue affects Apache Airflow 2.0.0.
CVE-2021-26560 (severity: HIGH, weakness: CWE-319)
Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.
CVE-2021-26561 (severity: HIGH, weakness: CWE-121)
Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.
CVE-2021-26562 (severity: HIGH, weakness: CWE-787)
Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.
CVE-2021-26563 (severity: MEDIUM, weakness: CWE-863)
Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.
CVE-2021-26564 (severity: HIGH, weakness: CWE-319)
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.
CVE-2021-26565 (severity: MEDIUM, weakness: CWE-319)
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session.