Consumer Comanda Mobile Restaurant Order Handler Cleartext Transmission Vulnerability

A vulnerability allowing cleartext transmission of sensitive information has been identified in Consumer Comanda Mobile versions prior to 14.9.3.2 and 15.0.0.8. This issue affects the Restaurant Order Handler component, where the Login/Password argument can be manipulated to transmit sensitive data unencrypted. The vulnerability can only be exploited within the local network, and the complexity of the attack is considered high.

Impact

Exploitation of this vulnerability leads to the unencrypted transmission of sensitive information, specifically login credentials, which could be intercepted by an attacker on the same local network.