Threats tagged 'ghsa-2r7c-ggmc-xvcq'

iMonitor EAM version 9.6394 transmits communications between its client agent and server, as well as between the management software and server, in plaintext without any authentication or encryption. This vulnerability allows an attacker with network access to intercept sensitive data such as credentials, keylogger information, and personally identifiable information. Additionally, the attacker can tamper with the traffic, potentially issuing arbitrary commands to client agents.