CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- dependencytrack dependency-trackDependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions4.4 Medium
- redhat virtualizationA flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log...6.5 Medium
- hunter2 project hunter2An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of...6.5 Medium
- dell geodriveDell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An...5.5 Medium
- rocket.chatA cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token...5.3 Medium
- jenkins bigpanda notifier, jenkins project bigpanda notifier plugin +1 moreJenkins BigPanda Notifier Plugin Missing Password Field Masking5.3 Medium
- shopwareSensitive data in backend customer module5.4 Medium
- baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 moreUnencrypted internal storage of security credentials4.2 Medium
- hauk project haukbilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded...7.5 High
- suse rancherRancher: Failure to properly sanitize credentials in cluster template answers9.9 Critical
- suse rancherRancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object9.9 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qca6390 firmware +85 more +87 moreDevices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in...7.7 High
- containers podman, redhat enterprise linux server, enterprise linux workstation +2 moreThe version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190...5.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which...4.4 Medium
- openstack tripleo heat templatesA flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs...5.5 Medium
- arcinfo pcvue, arc informatique pcvue 12 oauth web service configuration, pcvue 15 oauth web service configuration +2 moreARC Informatique PcVue5.5 Medium
- guest management system project management system, sourcecodester guest management system +1 moreSourceCodester Guest Management System cleartext storage4.3 Medium
- apache openofficeApache OpenOffice Weak Master Keys8.8 High
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability...6.4 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A...8.5 High
- landray office automationLanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an...7.5 High
- omron cp1w-cif41 firmware, sysmac cj2h firmware, sysmac cj2m firmware +4 more +6 moreIn Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to...7.5 High
- motorolasolutions mdlcThe Motorola MOSCAD Toolbox software through 2022-05-02 relies on a cleartext password. It...7.5 High
- libreoffice, debian linux +1 moreWeak Master Keys8.8 High
- goldshell miner firmwareThe debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed...7.5 High
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS API not secure6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability7.8 High
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch could disclose sensitive database information to a local user in plain text.4.0 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive...4.0 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in...4.9 Medium
- google androidIn multiple functions of StorageManagerService.java and UserManagerService.java, there is a...5.5 Medium
- ibm spectrum protect clientIBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text...6.2 Medium
- melag ftp serverMELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.5.5 Medium
- rocketsoftware ags-zenaASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4...7.5 High
- cassia networks access controller, sicunet access control +1 moreSICUNET Access Controller Password Storage cleartext storage5.9 Medium
- filezilla-project filezilla client** DISPUTED ** FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH...6.5 Medium
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND...4.4 Medium
- cveproject cve-servicesPotential secrets being logged to disk in CVE Services7.5 High
- ibm spectrum protect operations center, spectrum protect +1 moreIBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain...5.1 Medium
- sap businessobjects, businessobjects business intelligence, sap se businessobjects enterprise (central management server) +2 moreDuring an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions...7.8 High
- 1password1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass....5.5 Medium
- broadcom sannavBrocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.3.3 Low
- veryfitpro project veryfitproVeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and...7.8 High
- ibm security guardiumIBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a...4.1 Medium
- aveva system platformAVEVA System Platform Cleartext Storage of Sensitive Information in Memory8.1 High
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F...5.9 Medium
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F...9.1 Critical
- 3cx3CX System through 2022-03-17 stores cleartext passwords in a database.6.5 Medium
- grafana, redhat ceph storage, storage +2 moreAn issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix...9.8 Critical
- netapp snapcenterSnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local...5.5 Medium
- Show moreLoading…