A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.