CVE-2021-29397: Globalnorthstar Northstar Club Management

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote local user to intercept users credentials transmitted in cleartext over HTTP.

Affected products

• Globalnorthstar Northstar Club Management: version 6.3 only

Published 2022-02-04. Last modified 2026-06-17.