description: It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp suite etc.
problem types: CWE-200
affected:
{
product: Business-central
vendor: n/a
versions:
status: affected, version: versions up to and including business-central-webapp-7.48.0
}