CWE-311: Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- pyjwt project pyjwtpyjwt v2.10.1 was discovered to contain weak encryption.7.0 High
- apple macosA privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS...4.4 Medium
- capillary io capillaryscopeEncryption of sensitive data in CapillaryScope missing6.9 Medium
- ibm engineering systems design rhapsodyIBM Engineering Systems Design Rhapsody information disclosure5.9 Medium
- ibm cognos analytics mobileIBM Cognos Analytics Mobile (iOS) information disclosure5.9 Medium
- No product listedAn issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A...7.5 High
- jenkins user1st utester, jenkins project user1st utester plugin +1 moreJenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users6.5 Medium
- jenkins xooa, jenkins project xooa plugin +1 moreJenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users6.5 Medium
- jenkins sensedia api platform tools, jenkins project sensedia api platform tools plugin +1 moreJenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file6.5 Medium
- jenkins vaddy, jenkins project vaddy plugin +1 moreJenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated users6.5 Medium
- jenkins project dead man's snitch plugin, jenkins dead man\'s snitch +1 moreJenkins Dead Man's Snitch Plugin vulnerability stores tokens in plain text6.5 Medium
- jenkins ibm cloud devops, jenkins project ibm cloud devops plugin +1 moreJenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens6.5 Medium
- jenkins qmetry test management, jenkins project qmetry test management plugin +1 moreJenkins QMetry Test Management Plugin stores unencrypted API keys6.5 Medium
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens4.3 Medium
- git-annexS3 and Glacier remotes creds embedded in the git repo were not encrypted7.5 High
- No product listedAn issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing...5.7 Medium
- siemens sirius 3rk3 modular safety system (mss), sirius safety relays 3sk2 +1 moreA vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions),...8.7 High
- stacklok toolhiveToolHive stores secrets in the state store with no encryption2.4 Low
- milestone systems xprotect vmsSystem configuration password reset5.5 Medium
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 moreJenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration Form5.5 Medium
- ibm cloud pak system, cloud pak system software suite +1 moreIBM Cloud Pak System information disclosure6.5 Medium
org.opendaylight.sfc:odl-sfc-openflow-rendererMaven,org.opendaylight.sfc:odl-sfc-ovsMaven +1 moreOpenDaylight SFC Insecure Shiro Cookie Configuration8.1 High- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Configuration File on the client workstation is not encrypted7.1 High
- temporal technologies, inc. api-go libraryField in api-go proxy not transformed before version 1.44.12.0 Low
- ibm storage defender, storage defender - resiliency service +1 moreIBM Storage Defender information disclosure5.9 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- arista networks cloudvision applianceOn Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This re…4.6 Medium
- huawei harmonyosAccess control vulnerability in the identity authentication module Impact: Successful...7.5 High
- asseco business solutions s.a. wapro erp desktopProtocol Downgrade in Wapro ERP Desktop9.1 Critical
- snowflake jdbcSnowflake JDBC Security Advisory5.9 Medium
- gradio-app gradioInsecure communication between the FRP client and server in Gradio8.2 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Information Disclosure Vulnerability6.5 Medium
- synology active backup for business agentMissing encryption of sensitive data vulnerability in settings functionality in Synology Active...5.0 Medium
- synology active backup for business agentMissing encryption of sensitive data vulnerability in login component in Synology Active Backup...5.3 Medium
- echostar fusion, hughes network systems wl3000 fusion software +1 moreHughes Network Systems WL3000 Missing Encryption of Sensitive Data7.1 High
- cisco duo authentication for epicCisco Duo Epic for Hyperdrive Information Disclosure Vulnerability5.5 Medium
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure5.9 Medium
- nepstech ntpl-xpon1gfevn firmwareAn issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain...7.5 High
- ibm qradar network packet captureIBM QRadar Network Packet Capture information disclosure5.9 Medium
- rockwell automation pavilion8®, rockwellautomation pavilion8 +1 moreRockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol5.3 Medium
- korenix jetport 5601v3Plaintext Communication7.1 High
- elastic elasticsearchElasticsearch elasticsearch-certutil csr fails to encrypt private key4.9 Medium
- arpsyndicate punciaPuncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`6.3 Medium
- dell data lakehouseDell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data...6.8 Medium
- trellix intrusion prevention system (ips) managerA vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow...6.8 Medium
- motorola solutions vigilant fixed lpr coms box (bcav1f2-c600), motorolasolutions vigilant fixed lpr coms box bcav1f2 c600 +1 moreMissing Encryption of Sensitive Data in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)5.1 Medium
silverstripe/frameworkPackagistsilverstripe/framework users inadvertently passing sensitive data to LoginAttempt6.5 Medium- nasa ait-core, ait core +1 moreNASA AIT-Core uses unencrypted channels to exchange data over the network7.3 High
- ge healthcare echopac software only, echopac turnkey, imagevault +2 more +4 moreVulnerable data in transit in GE HealthCare EchoPAC products5.7 Medium
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access Container information disclosure6.2 Medium
- Show moreLoading…