The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.Referenceshttps://us-cert.cisa.gov/ics/advisories/icsa-21-308-02