CVE-2015-0943

CVE-2015-0943 describes a critical vulnerability in Basware Banking (Maksuliikenne) versions prior to 9.10.0.0, where client-to-backend server communication lacks encryption. This absence of encryption allows man-in-the-middle attackers to intercept sensitive data, including encryption keys and user credentials, or to maliciously alter data streams. With a CVSS score of 5.8, the vulnerability is moderately severe, requiring medium attack complexity but allowing for partial compromise of confidentiality and integrity without authentication. Despite its potential impact, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.