CWE-311: Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- linksys wrt1900acs firmwareAn issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how...7.8 High
- auo solar data recorderAn issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic...9.8 Critical
- orpak siteomatAn insecure communication was found between a user and the Orpak SiteOmat management console for...9.8 Critical
- ovirt cockpit-ovirtDuring HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var...5.6 Medium
- rediff rediffmailThe Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content...4.6 Medium
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext...8.2 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability5.3 Medium
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot Vulnerability4.2 Medium
- openapi-generator openapi generatorOpenAPI Tools OpenAPI Generator uses HTTP in various files8.1 High
- arrow-kt arrowMissing Encryption of Sensitive Data in arrow-kt Arrow8.1 High
- kofax front office serverIn Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as...4.9 Medium
- moxa eds-405a firmware, eds-408a firmware, eds-510a firmware +2 more +4 moreMoxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A...9.8 Critical
- palo alto networks globalprotect agent, paloaltonetworks globalprotect +1 moreInformation Disclosure in GlobalProtect Agent2.5 Low
- jenkins perfecto mobile, jenkins project perfecto mobile plugin +1 moreJenkins Perfecto Mobile Plugin stores credentials in plain text6.5 Medium
- jenkins open stf, jenkins project open stf plugin +1 moreJenkins Open STF Plugin stores credentials in plain text6.5 Medium
- jenkins upload to pgyer, jenkins project upload to pgyer plugin +1 moreJenkins Upload to pgyer Plugin stores credentials in plain text6.5 Medium
- jenkins fabric beta publisher, jenkins project fabric beta publisher plugin +1 moreJenkins Fabric-beta-publisher Plugin stores credentials in plain text6.5 Medium
- jenkins audit to database, jenkins project audit to database plugin +1 moreJenkins Audit to Database Plugin stores credentials in plain text8.8 High
- jenkins hyper.sh commons, jenkins project hyper.sh commons plugin +1 moreJenkins hyper.sh Commons Plugin stores credentials in plain text8.8 High
- jenkins vs team services continuous deployment, jenkins project vs team services continuous deployment plugin +1 moreJenkins VS Team Services Continuous Deployment Plugin stores credentials in plain text8.8 High
- jenkins wildfly deployer, jenkins project wildfly deployer plugin +1 moreJenkins wildFly Deployer Plugin stores credentials in plain text8.8 High
- jenkins octopusdeploy, jenkins project octopusdeploy plugin +1 moreJenkins Octopus Deploy Plugin stores credentials in plain text8.8 High
- jenkins veracode-scanner, jenkins project veracode-scanner plugin +1 moreJenkins veracode-scanner Plugin stores credentials in plain text8.8 High
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin stores credentials in plain text8.8 High
- jenkins vmware vrealize automation, jenkins project vmware vrealize automation plugin +1 moreJenkins VMware vRealize Automation Plugin Missing Encryption of Sensitive Data8.8 High
- jenkins trac publisher, jenkins project trac publisher plugin +1 moreJenkins Trac Publisher Plugin stores credentials in plain text8.8 High
- jenkins bugzilla, jenkins project bugzilla plugin +1 moreJenkins Bugzilla Plugin stores credentials in plain text8.8 High
- jenkins cloudshare docker-machine, jenkins project cloudshare docker-machine plugin +1 moreJenkins CloudShare Docker-Machine Plugin stores credentials in plain text8.8 High
- jenkins aws-device-farm, jenkins project aws-device-farm plugin +1 moreJenkins aws-device-farm Plugin stores credentials in plain text8.8 High
- jenkins amazon sns build notifier, jenkins project amazon sns build notifier plugin +1 moreJenkins Amazon SNS Build Notifier Plugin stores credentials in plain text8.8 High
- jenkins aws cloudwatch logs publisher, jenkins project aws cloudwatch logs publisher plugin +1 moreJenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain text8.8 High
- jenkins jenkins-cloudformation-plugin, jenkins project jenkins-cloudformation-plugin plugin +1 moreJenkins CloudFormation Plugin stores credentials in plain text8.8 High
- jenkins official owasp zap, jenkins project official owasp zap plugin +1 moreJenkins OWASP ZAP Plugin stores unencrypted credentials8.8 High
- jenkins bitbucket approve, jenkins project bitbucket approve plugin +1 moreJenkins Bitbucket Approve Plugin stores credentials in plain text8.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreJenkins WebSphere Deployer Plugin stores credentials in plain text8.8 High
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreJenkins FTP publisher Plugin stores credentials in plain text8.8 High
- jenkins jira issue updater, jenkins project jira issue updater plugin +1 moreJenkins Jira Issue Updater Plugin stores credentials in plain text8.8 High
- jenkins hockeyapp, jenkins project hockeyapp plugin +1 moreJenkins HockeyApp Plugin stores credentials in plain text8.8 High
- jenkins aws elastic beanstalk publisher, jenkins project aws elastic beanstalk publisher plugin +1 moreJenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text8.8 High
- jenkins irc, jenkins project irc plugin +1 moreJenkins IRC Plugin stores credentials in plain text8.8 High
- grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 moreA Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128...5.3 Medium
- jenkins prqa, jenkins project prqa plugin +1 moreJenkins PRQA Plugin stored password in plain text7.8 High
- abus secvest wireless alarm system fuaa50000 firmware, secvest wireless remote control fube50014 firmware, secvest wireless remote control fube50015 firmware +2 moreAn issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction...6.5 Medium
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by...7.5 High
- ibm cloud privateIBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept...4.4 Medium
- ibm cloud privateIBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept...4.4 Medium
- netapp snapcenter serverNetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an...5.3 Medium
- apache guacamoleMissing Encryption of Sensitive Data in Apache Guacamole7.5 High
- 3s-smart software solutions gmbh codesys control v3 products prior to version 3.5.14.0, codesys control for beaglebone sl, control for empc-a\/imx6 sl +10 more +12 moreIn 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user...9.8 Critical
- netapp oncommand unified manager for 7-mode (core package), oncommand unified manager +1 moreOnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the...7.4 High
- Show moreLoading…