Description
In the context of an HTTP transaction, basic access authentication is a method for an HTTP user agent to provide a user name and password when making a request.
One or more directories are protected using Basic Authentication over an HTTP connection. With Basic Authentication the user credentials are sent as cleartext and because HTTPS is not used, they are vulnerable to packet sniffing.
Remediation
Use Basic Authentication over an HTTPS connection.
References
Related Vulnerabilities
Passive Mixed Content over HTTPS
ASP.NET: Failure To Require SSL For Authentication Cookies
MediaWiki Insufficiently Protected Credentials Vulnerability (CVE-2020-29005)
Telerik Web UI Insufficiently Protected Credentials Vulnerability (CVE-2017-9248)
Mailman Insufficiently Protected Credentials Vulnerability (CVE-2021-43332)