Description
Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 0.0.5
References
Could your website be exposed too?
SmartScanner can check your website for Resources Downloaded over Insecure Protocol in igniteui and gives you actionable findings to investigate.
Start a free scanRelated Issues
- cloudpub-redis downloads Resources over HTTP - CVE-2016-10672
- Downloads Resources over HTTP in jser-stat - CVE-2016-10592
- selenium-wrapper downloads Resources over HTTP - CVE-2016-10628
- Downloads Resources over HTTP in product-monitor - CVE-2016-10567


