CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- acexy wireless-n wifi repeater firmwareThe /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV...7.5 High
- gitlabIn all versions of GitLab starting from 13.7, marshalled session keys were being stored in Redis.5.7 Medium
- mozilla thunderbirdThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 High
- typo3, typo3 typo3.cms +1 moreCleartext storage of session identifier5.9 Medium
- taidii diibearThe Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain...6.8 Medium
- taidii diibearThe Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain...7.8 High
- debian courier-authlib, linux +1 moreThe Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a ...7.5 High
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreOn Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction...7.5 High
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Cleartext Storage of Sensitive Information via cmdmod4.4 Medium
- rangerstudio directus** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can learn sensitive...5.3 Medium
- keybaseKeybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps di…5.5 Medium
- genymobile genymotion desktop** DISPUTED ** Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android...5.3 Medium
- owncloud clientThe ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN...3.9 Low
- intel core i3, core i5, core i7 +2 moreDebug message containing addresses of memory transactions in some Intel(R) 10th Generation Core...4.4 Medium
- mutare voiceAn issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web...4.9 Medium
- tp-link archer c5v firmwareTP-Link Archer C5v 1.7_181221 devices allows remote attackers to retrieve cleartext credentials...6.5 Medium
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text...5.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information...7.1 High
- ibm security verify information queueIBM Security Verify Information Queue information disclosure5.3 Medium
- telegramTelegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to...5.5 Medium
- telegramTelegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in...5.5 Medium
- fiberhome hg6245d firmwareAn issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find...7.5 High
- fiberhome hg6245d firmwareAn issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has...7.5 High
- fiberhome hg6245d firmwareAn issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext...7.5 High
- fiberhome hg6245d firmwareAn issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext...7.5 High
- fiberhome hg6245d firmwareAn issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in...7.5 High
- mcafee endpoint security, mcafee llc endpoint security (ens) for windows +1 moreClear text storage of sensitive Information in ENS7.3 High
- smartfoxserverAn issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via ...5.5 Medium
- ibm cloud pak for automationIBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in...6.5 Medium
- huawei ecns280 td firmwareThere is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A...4.1 Medium
- google androidIn moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale...7.8 High
- ibm security guardiumIBM Security Guardium 11.2 discloses sensitive information in the response headers that could be...4.3 Medium
- merkuryinnovations geeni gnc-cw025 firmware, geeni gnc-cw028 firmware, merkury mi-cw017 firmware +1 more +3 moreAn issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury...7.2 High
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Information Disclosure Vulnerability7.7 High
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be...4.1 Medium
- ibm security guardium data encryptionIBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL...3.7 Low
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs...3.7 Low
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in...4.4 Medium
- marvell qconvergeconslole guiIn Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users...8.8 High
- dlink dsl-2888a firmwareAn issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55....7.5 High
- gigamon gigavue-osGigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext.4.7 Medium
- dell powerstore, emc powerstore firmware +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage...7.5 High
- dell powerstore, emc powerstore firmware +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage...6.4 Medium
- dell powerstore, emc powerstore firmware +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage...7.5 High
- dell unity, emc unity operating environment, emc unity vsa operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text...6.4 Medium
- qnap qts, quts hero, qutscloud +2 moreCleartext Storage of Sensitive Information in Cookies7.5 High
- nchsoftware express accountsNCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by...5.5 Medium
- parse-community parse-serverParse Server stores password in plain text7.7 High
- urveAn issue was discovered in URVE Build 24.03.2020. The password of an integration user account ...7.5 High
- titanhq spamtitanSpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.5.3 Medium
- Show moreLoading…