CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- zyxel atp100 firmware, atp100w firmware, atp200 firmware +28 more +30 moreFirmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an...9.8 Critical
- ibm security secret serverIBM Security Secret Server 10.6 stores potentially sensitive information in config files that...6.3 Medium
- apache airflowApache Airflow logs passwords in plaintext6.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1...4.3 Medium
- sap netweaver application server java, sap se netweaver as java (key storage service) +1 moreSAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the...5.4 Medium
- ceph ceph-ansible, redhat ceph storage +1 moreCeph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,...5.5 Medium
- typo3, typo3 typo3.cms +1 moreCleartext storage of session identifier8.1 High
- view frontend statistics project frontend statisticsAn issue was discovered in the view_statistics (aka View frontend statistics) extension before 2...6.5 Medium
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored...7.5 High
- basetech ge-131 bt-1837836 firmwareUnprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921...5.5 Medium
- braveThe implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1...5.5 Medium
- sonarsource sonarqube** DISPUTED ** SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and...7.5 High
- bigbluebuttonThe installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the...8.4 High
- fortinet fortios, fortiproxy, fortigate and fortiproxy +2 moreA cleartext storage of sensitive information vulnerability in FortiOS command line interface in...5.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be...5.3 Medium
- nextcloud desktopA cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away...7.5 High
- jenkins elastest, jenkins project elastest plugin +1 morePasswords stored in plain text by ElasTest Plugin5.5 Medium
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). Insecure...5.3 Medium
- niscomed m1000 multipara patient monitor firmwareAn issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory...5.5 Medium
- niscomed m1000 multipara patient monitor firmwareAn issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the...7.5 High
- django-celery-results project django-celery-resultsdjango-celery-results Stores Sensitive Information In Cleartext7.5 High
- schneider-electric easergy builderA CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder ...5.5 Medium
- schneider-electric easergy builderA CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy...7.8 High
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that...5.1 Medium
- hcltech bigfix platform"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is...6.0 Medium
- django two-factor authentication project two-factor authentication, bouke django-two-factor-auth +1 moreIn Django Two-Factor Authentication, user passwords are stored in clear text in the Django session5.4 Medium
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear...6.3 Medium
- f5 nginx controllerIn NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is...7.8 High
- mirumee saleor, saleor-storefront +1 moreClient caching login operation with plaintext password in Saleor Storefront6.9 Medium
- biotronik cardiomessenger ii-s gsm firmware, cardiomessenger ii-s t-line firmware +1 moreBIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at...4.6 Medium
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store...9.1 Critical
- apache artemis, red hat activemq artemis, netapp oncommand workflow automation +2 moreActiveMQ Artemis has Insufficiently Protected Credentials5.5 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.5.3 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information...7.5 High
- aliasrobotics mir1000 firmware, mir100 firmware, mir200 firmware +8 more +10 moreRVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllers7.5 High
- heinekingmedia stashcatAn issue was discovered in the stashcat app through 3.9.2 for macOS, Windows, Android, iOS, and...7.5 High
- fortinet fortios, fortios and fortiproxy +1 moreA cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.2 and...5.3 Medium
- schneider-electric easergy t300 firmwareA CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 ...7.5 High
- homey firmware, pro firmware +1 moreAn issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0....4.3 Medium
- dlink dir-865l firmwareD-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information.7.5 High
- johnson controls american dynamics victor video management system v5.2, software house c•cure 9000 v2.70, tyco victor video management system +1 more +3 moreC•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software.9.9 Critical
- libreoffice, opensuse leap +1 moreCrash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save5.3 Medium
- health covidsafeUnnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a...5.3 Medium
- jetstream jetselectThe administrative passwords for all versions of Bond JetSelect are stored within an unprotected...6.5 Medium
- redhat openshift container platform, [unknown] openshift/openshift-apiserver +1 moreA flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the...6.3 Medium
- blaauwproducts remote kiln controlBlaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL...9.8 Critical
- grafana, fedoraproject fedora, redhat ceph storage +1 more +3 moreGrafana information disclosure5.5 Medium
- sonatype nexus repository managerAn issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3...4.9 Medium
- rukovoditelIn Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding,...5.3 Medium
- Show moreLoading…