https-not-enabled
The app does not contain configurations for enabled HTTPS in a non-development environment. This can lead to sensitive data being transmitted in cleartext, which can be intercepted by an attacker. To prevent this vulnerability, enable HTTPS in non-development environments.
Likelihood: MEDIUM
Confidence: HIGH
CWE:
- CWE-319: Cleartext Transmission of Sensitive Information
OWASP:
- A02:2021 - Cryptographic Failures
https-not-enabled
The app does not contain configurations for enabled HTTPS in a non-development environment. This can lead to sensitive data being transmitted in cleartext, which can be intercepted by an attacker. To prevent this vulnerability, enable HTTPS in non-development environments.
Likelihood: MEDIUM
Confidence: HIGH
CWE:
- CWE-319: Cleartext Transmission of Sensitive Information
OWASP:
- A02:2021 - Cryptographic Failures