CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain...4.4 Medium
- [unknown] foreman, redhat satellite +1 moreA flaw was found in foreman before version 1.15 in the logging of adding and registering images....6.5 Medium
- makemytripAn issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally...6.5 Medium
- bitpie bitcoin walletThe Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital...4.1 Medium
- philips dosewise, dosewise portal +1 moreThe Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login...8.8 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreWebvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC...7.3 High
- laravel log viewer project log viewerPlaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.07.5 High
- insteon for hubIn version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the...9.8 Critical
- wink, wink labs inc - smart home +1 moreIn version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used...9.8 Critical
- photo\,video locker-calculator project locker-calculatorThe "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true"...7.5 High
- cisco policy suiteA vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS)...7.5 High
- gm shanghai onstarAn Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and...7.5 High
- ismartalarm cubeone firmwareEncryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows...7.5 High
- huawei filesThe Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of...6.7 Medium
- wordpress, debian linux +1 moreWordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous...6.5 Medium
- ibm infosphere master data management, infosphere master data management server +1 moreIBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in...7.8 High
- milwaukee tool one-keyThe Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk...7.5 High
- moxa edr-g903 firmwareMoxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext...7.5 High
- siemens ruggedcom rox ii firmware, ruggedcom rugged operating system +1 moreThe SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not...4.3 Medium
- ibm java sdk, redhat enterprise linux desktop, enterprise linux eus +5 more +7 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...5.5 Medium
- sonarsource jenkins pluginJenkins SonarQube Plugin Stores Passwords in Cleartext4.0 Medium
- d-link dir-300 router, dlink dir-300 firmware +1 moreThe D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to...6.8 Medium
- sandisk cruzer enterprise firmwareSanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the...4.6 Medium
- huawei d100 firmwareThe Huawei D100 stores the administrator's account name and password in cleartext in a cookie,...7.5 High
- symantec altiris deployment solutionSymantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity...7.8 High
- klinzmann application access serverApplication Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in...5.5 Medium
- apple mac os x, mac os x server +1 moreiChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM)...7.5 High
- opensc-project opensc, fedoraproject fedora +1 moresrc/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party...7.5 High
- xlinesoft phprunnerUserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the...7.5 High
- sepcity classified adsSepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which...7.5 High
- phpmyadmin, debian linux, fedoraproject fedora +1 more +3 morephpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish...5.5 Medium
- ge proficy real-time information portalGE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication,...9.8 Critical
- flexispy mobile spyMobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and ...7.5 High
- capturix scanshareCapturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext...5.5 Medium
- ipswitch imailIMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to...7.5 High
- dlink dsl-504t firmwareD-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file,...7.5 High
- broadcom bluecoat security gatewayThe web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1,...7.5 High
- phprankphpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie,...7.5 High
- pgp personal privacyMicrosoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a...5.5 Medium
- symfony twigThe default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores...7.5 High
- audiogalaxyAutogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for...7.5 High
- xitamiXitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file,...9.8 Critical