CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- appinghouse memonoUsers can lock their notes with a password in Memono version 3.8. Thus, users needs to know a...7.5 High
- jenkins copr, jenkins project copr plugin +1 moreCredentials stored in plain text by Jenkins Copr Plugin4.3 Medium
- jetbrains pycharmIn JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were...7.5 High
- universal robots ur3, ur5 and ur10, universal-robots ur software +1 moreRVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions7.5 High
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreThe UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database....9.8 Critical
- unisoon ultralog express, ultralog express firmware +1 moreUnisoon UltraLog Express - Sensitive Data Exposure8.6 High
- jenkins project artifactory plugin, jfrog artifactory +1 morePasswords stored in plain text by Jenkins Artifactory Plugin6.5 Medium
- netsas enigma network management solutionNETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database...6.5 Medium
- dlink dsl-2875al firmware, dsl-2877al firmware +1 moreD-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via...7.5 High
- django-nopassword project django-nopassworddjango-nopassword stores secrets in cleartext7.5 High
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...3.3 Low
- watchguard ad helper firmwareThe AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to...7.5 High
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...9.8 Critical
- siemens control center server (ccs), sinvr/sivms video server, sinvr 3 central control server +1 more +3 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...5.3 Medium
- jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreJenkins Zephyr for JIRA Test Management Plugin stores credentials in plain text5.5 Medium
- red hat business-central, redhat decision manager, process automation manager +2 moreA vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where...4.6 Medium
- moxa iologik 2512-hspa-t firmware, iologik 2512-hspa firmware, iologik 2512-t firmware +17 more +19 moreMoxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility ioLogik...7.5 High
- iblsoft online weatherIBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the...3.1 Low
- mozilla thunderbird, canonical ubuntu linux +1 moreIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 Medium
- secom dr.id access control, dr.id attendance system, taiwan secom co., ltd. door access control system +1 more +3 moreTAIWAN SECOM CO., LTD. – Sensitivity Information Exposure7.5 High
- cisco linksys e4200 firmwareCisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers...7.5 High
- ibm storediqIBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due...2.9 Low
- parallelsParallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle...7.5 High
- free5gc smf, simplemachines simple machines forum +1 moreThere is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions...7.2 High
- fedoraproject 389 directory server, hp hp-ux directory server, redhat directory server +2 more389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server...3.3 Low
- prophecyinternational snareSnare for Linux before 1.7.0 has password disclosure because the rendered page contains the field...7.5 High
- gitlabGitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.7.5 High
- arista cloudvision portalIn CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the...4.9 Medium
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...4.9 Medium
- fronius datamanager box 2.0 firmware, eco 25.0-3-s firmware, eco 27.0-3-s firmware +63 more +65 moreFronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1...4.4 Medium
- cloudera managerCloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.6.5 Medium
- [unknown] tower, redhat ansible tower +1 moreAn attacker with low privilege could retrieve usernames and passwords credentials from the new...8.4 High
- red hat katelloKatello cleartext password storage issue4.1 Medium
- qtnxqtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world...5.5 Medium
- getfiregpg firegpgFireGPG before 0.6 handle user?s passphrase and decrypted cleartext insecurely by writing pre...7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Weak Cryptography5.3 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in...5.9 Medium
- mcafee total protection, mcafee, lcc mcafee total protection +1 moreFile masquerade attack vulnerability in McAfee Total Protection7.5 High
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin vulnerable to Cleartext credential storage7.8 High
- jenkins view26 test-reporting, jenkins project view26 test-reporting plugin +1 moreJenkins View26 Test-Reporting Plugin stores access token in plain text4.3 Medium
- jenkins soasta cloudtest, jenkins project soasta cloudtest plugin +1 moreJenkins SOASTA CloudTest Plugin stores API token in plain text4.3 Medium
- jenkins elasticbox ci, jenkins project elasticbox ci plugin +1 moreCleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin3.3 Low
- jenkins fortify on demand, jenkins project fortify on demand plugin +1 moreJenkins Fortify on Demand Plugin stores credentials in plain text8.8 High
- jenkins extensive testing, jenkins project extensive testing plugin +1 moreCleartext Storage of Sensitive Information in Jenkins Extensive Testing Plugin8.8 High
- jenkins sofy.ai, jenkins project sofy.ai plugin +1 moreJenkins Sofy.AI Plugin stores API token in plain text4.3 Medium
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin stores credentials in Cleartext8.8 High
- jenkins neoload, jenkins project neoload plugin +1 moreJenkins NeoLoad Plugin stores credentials in cleartext8.8 High
- dell imageassistDell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell...7.5 High
- zingbox inspectorA security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in...7.5 High
- Show moreLoading…