CWE-311: Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +72 more +74 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...6.7 Medium
- cherwell service managementAn issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The...5.3 Medium
- github.com/flynn/noise, noiseprotocol noise +1 moreWeak encryption and denial of service in github.com/flynn/noise7.5 High
- sealevel seaconnect 370w firmwareAn information disclosure vulnerability exists in the Web Server functionality of Sealevel...7.4 High
- king jim co.,ltd. mirupass, kingjim mirupass pw10 firmware, mirupass pw20 firmware +2 moreMissing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and ...4.6 Medium
- jenkins conjur secrets, jenkins project conjur secrets plugin +1 moreAgent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets7.5 High
- dome dm501, jasco zw4201, linear lb60z-1 +2 more +4 moreZ-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including...8.1 High
- linear wadwaz-1, wapirz-1, silicon labs 300 series +5 more +7 moreZ-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption,...8.8 High
- mediatek l9, lr11, lr12 +3 more +5 moreIn Modem EMM, there is a possible information disclosure due to a missing data encryption. This...7.5 High
- digi transport wr11 firmware, transport wr11 xt firmware, transport wr21 firmware +3 more +5 moreAn issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the...7.5 High
- fortinet forticlientems, forticlient enterprise management server +1 moreA missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below,...6.8 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful...7.5 High
- digipas egeetouch managerAn issue was discovered in the eGeeTouch 3rd Generation Travel Padlock application for Android....6.8 Medium
- wokkalokka wokka watch q50 firmwareWokka Lokka Q50 devices through 2021-11-30 allow remote attackers (who know the SIM phone number...8.1 High
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on...3.1 Low
- siemens climatix pol909 (awb module), climatix pol909 (awm module), climatix pol909 firmware +2 moreA vulnerability has been identified in Climatix POL909 (AWM module) (All versions < V11.34). The...7.4 High
- meross smart wi-fi 2 way wall switch, mss550x firmware +1 moreMeross MSS550X Missing Encryption of Sensitive Data7.4 High
- solarwinds kiwi syslog serverMissing Secure Flag From SSL Cookie3.1 Low
- arista eosIn Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the devi…5.7 Medium
- ibm transformation extender advancedIBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set...4.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.5.3 Medium
- ledgersmb, ledgersmb ledgersmb/ledgersmb +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb5.9 Medium
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 moreECOA BAS controller - Missing Encryption of Sensitive Data7.3 High
- citrix sharefile storage zones controller, sharefile storagezones controller +1 moreAn issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones...7.5 High
- suse rancher, rancher k3s, rancher rke2 +2 moreK3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token6.5 Medium
- apache directory studioStartTLS and SASL confidentiality protection bypass7.5 High
- magicsmotion flamingo 2 firmwareMagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery.5.3 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreMissing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all...5.5 Medium
- fortinet fortimailA missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0...5.9 Medium
- quassel-irc quassel, fedoraproject fedora +1 moreQuassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a...7.5 High
- ibm resilient soar, resilient security orchestration automation and response +1 moreIBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information...4.4 Medium
- gallagher command centreCleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre...6.0 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information,...5.3 Medium
- hom.ee brain cube corehomee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and...7.5 High
- btcpayserver btcpay serverBTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information,...5.3 Medium
- ibm api connectIBM API Connect V10 is impacted by insecure communications during database replication. As the...5.9 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreMissing HtppOnly and Secure flags5.3 Medium
- pyres termod4 firmwareSensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices...7.5 High
- skyworth gn542vf, gn542vf boa firmware +1 moreSkyworth GN542VF Boa version 0.94.13 does not set the Secure flag for the session cookie in an...7.5 High
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or...4.3 Medium
- qnap qtsCleartext Transmission of Sensitive Information in SNMP7.5 High
- changing inc. nhiservisignadapterCHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access7.5 High
- mersive solstice firmware, solstice pod firmware +1 more** DISPUTED ** In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled....7.5 High
- titanhq spamtitanSpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.5.3 Medium
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web...9.8 Critical
- hcl bigfix inventory, hcltech bigfix platform +1 moreTLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and...7.5 High
- google androidIn isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and...7.5 High
- schneider-electric easergy t300 firmwareA CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2...7.5 High
- schneider-electric easergy t300 firmwareA CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2...7.5 High
- sap netweaver application server java, sap se netweaver as java (key storage service) +1 moreSAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the...5.4 Medium
- Show moreLoading…