Description
Using Basic Authentication over HTTP exposes user credentials to potential interception by attackers who can sniff and capture HTTP traffic. This authentication method sends credentials in Base64 encoding, which can be easily decoded into plaintext.
Test for Basic Authentication Over HTTP Vulnerability with SmartScanner
Donwload FREE!Recommendation
To enhance security, enforce the use of HTTPS (HTTP over TLS/SSL) to encrypt communication between clients and the server, ensuring confidentiality and integrity of user credentials.
References
Could your website be exposed too?
SmartScanner can check your website for Basic Authentication Over HTTP and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Password Sent Over HTTP - Vulnerability
- Password Input on HTTP - Vulnerability
- Password Sent in HTTP Query - Vulnerability
- No Redirection from HTTP to HTTPS - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated May 13, 2024