CVE-2019-25278

Medium · 5.9

CVSS

5.9

EPSS

0.3%

Published

Jan 8, 2026

CISA due date

—

The record

FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.

Affected packages

Ecosystem	Package	Introduced	Fixed