CVE-2018-19443

CVE-2018-19443 affects Tryton 5.x before 5.0.1, where the client attempts to establish a cleartext bus connection instead of an encrypted one under specific conditions. This failed connection attempt inadvertently exposes the user's current session in the header, making it vulnerable to session hijacking by a man-in-the-middle attacker. Rated Medium severity (CVSS 5.9), the vulnerability has a high confidentiality impact but requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.