Description
In the context of an HTTP transaction, basic access authentication is a method for an HTTP user agent to provide a user name and password when making a request.
One or more directories are protected using Basic Authentication over an HTTP connection. With Basic Authentication the user credentials are sent as cleartext and because HTTPS is not used, they are vulnerable to packet sniffing.
Remediation
Use Basic Authentication over an HTTPS connection.
References
Related Vulnerabilities
Active Mixed Content over HTTPS
Telerik Web UI Insufficiently Protected Credentials Vulnerability (CVE-2017-9248)
Insecure transition from HTTPS to HTTP in form post
ASP.NET: Failure To Require SSL For Authentication Cookies
PostgreSQL Insufficiently Protected Credentials Vulnerability (CVE-2021-23222)