APC PowerChute Network Shutdown’s web interface only supports HTTP, forcing credentials to be passed in the clear.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41957/apcClear.txt
Source: https://packetstormsecurity.com/files/41957/apcClear.txt.html