CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- veritas system recoveryVeritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows...5.3 Medium
- dell emc enterprise storage analytics for vrealize operations, enterprise storage analytics +1 moreDell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a...6.0 Medium
- hcltech bigfix insights" Insecure password storage issue.The application stores sensitive information in cleartext...7.5 High
- zyxel vmg3625-t50b firmware, ax7501-b0 firmware, dx3301-t0 firmware +28 more +30 moreA command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could...6.5 Medium
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreDue to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local,...5.5 Medium
- jenkins support core, jenkins project support core plugin +1 moreJenkins Support Core Plugin stores sensitive data in plain text6.5 Medium
- nvidia license systemNVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual...5.4 Medium
- siemens simatic pcs 7 v8.2, simatic pcs 7 v9.0, simatic pcs 7 v9.1 +7 more +9 moreA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...7.8 High
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct...7.5 High
- charactell formstorm, formstorm enterprise +1 moreCharactell - FormStorm Enterprise Account Take Over6.1 Medium
- iconics genesis64, mitsubishielectric mc works64 +1 morePlaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E ...5.5 Medium
- octopus tentacleWhen the Windows Tentacle docker image starts up it logs all the commands that it runs along with...5.5 Medium
- cisco session initiation protocol (sip) software, ip conference phone 7832 firmware, ip conference phone 8832 firmware +18 more +20 moreCisco IP Phones Information Disclosure Vulnerability4.6 Medium
- netgear r6700 firmwareNetgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All...7.5 High
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and...5.5 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and...4.9 Medium
- zyxel nbg6604 firmware, nbg6604 series firmware +1 moreA cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could...4.9 Medium
- idec data file manager, windedit, windldr +3 more +5 morePlaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU...7.5 High
- unisys cargo mobileUnisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information,...7.5 High
- sap business oneSAP Business One - version 10.0, allows an admin user to view DB password in plain text over the...4.4 Medium
- grafana agentInstance config inline secret exposure6.5 Medium
- bkw solar-log 500 firmwareAn issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email...6.5 Medium
- ibm mq, websphere mq +1 moreIBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which...6.2 Medium
- opengamepanelAn issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. $HOME/OGP/Cfg/Config...8.8 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The...5.5 Medium
- xorux lpar2rrd, stor2rrd +1 moreA password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because...7.5 High
- google android, samsung mobile devices +1 moreA vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov...7.9 High
- delta electronics dialinkDelta Electronics DIALink7.8 High
- fortinet fortiadcA cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0...4.3 Medium
- fortinet fortisiem, fortisiemwindowsagent +1 moreA unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below...5.5 Medium
- couchbase serverCouchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The...7.5 High
- couchbase servermetakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote...7.5 High
- ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 moreIBM Jazz Team Server products stores user credentials in clear text which can be read by an...6.5 Medium
- onepeloton pelotonExposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile...8.6 High
- ibm security risk manager on cp4s, cloud pak for security +1 moreIBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can...4.4 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2013 service pack 1 +30 more +32 moreRich Text Edit Control Information Disclosure Vulnerability5.5 Medium
- ibm data risk managerIBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an...5.3 Medium
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 moreECOA BAS controller - Missing Encryption of Sensitive Data7.3 High
- riconmobile s9922l firmwareRICON Industrial Cellular Router S9922L 16.10.3(3794) is affected by cleartext storage of...5.3 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user...6.2 Medium
- sap business clientWhen an attacker manages to get access to the local memory, or the memory dump of a victim, for...6.1 Medium
- siemens simatic cp 1543-1 (incl. siplus variants), simatic cp 1545-1, simatic cp 1543-1 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions <...6.5 Medium
- autumn project autumnIncorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear...7.5 High
- hitachi abb power grids system data manager – sdm600, hitachiabb-powergrids sdm600 firmware +1 moreStorage of Sensitive Information Vulnerability in Hitachi ABB Power Grids System Data Manager – SDM600 Product6.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreAn issue obscuring passwords in screenshots was addressed with improved logic. This issue is...5.0 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreSupport Bundle includes S/Mime and PGP secret or PIN5.2 Medium
- braveAn information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged...6.1 Medium
- axis device managerA user with permission to log on to the machine hosting the AXIS Device Manager client could...5.3 Medium
- primekey ejbcaAn issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias...2.7 Low
- apple ipados, ios and ipados, iphone os +2 moreA S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some MIME parts. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker may be ab…7.5 High
- Show moreLoading…