CVE-2019-17393

CVE-2019-17393 describes a critical vulnerability in Tomedo Server version 1.7.3, where communications between customer and vendor servers occur over unencrypted HTTP using basic authentication. This allows unauthorized actors to sniff network traffic, easily decode Base64-encoded credentials, and compromise user accounts. With a CVSS score of 9.8 (Critical), this vulnerability is easily exploitable over the network with low complexity, leading to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.