CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure6.2 Medium
- opensuse supportutils, suse linux enterprise server 12, linux enterprise server 15 +1 more +3 moresupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh4.4 Medium
- echelon i.lon vision, enocean smartserver +1 moreEnOcean SmartServer Hard-coded credentials6.3 Medium
- dell supportassist, supportassist for business pcs, supportassist for home pcs +2 moreDell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs ...7.1 High
- dell alienware 13 r2 firmware, alienware 13 r3 firmware, alienware 15 r2 firmware +155 more +157 moreDell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with...6.8 Medium
- hashicorp boundaryBoundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured5.0 Medium
- nextcloud mail, kiteworks security-advisories +1 moreNexcloud Mail app temporarily stores cleartext password in database2.0 Low
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information...6.1 Medium
- apache linkis, apache software foundation linkis (incubating) +1 moreApache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability6.5 Medium
- pgpool pgpool-iiInformation disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4...6.5 Medium
- xerox workcentre 3550 firmwareOn Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server...6.5 Medium
- phicomm k2 firmwarePhicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext.7.5 High
- phicomm k2 firmwarePhicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext.7.5 High
- heartcombo deviseDevise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie7.5 High
- suse rancherRancher: Exposure of sensitive fields9.9 Critical
- jenkins testquality updater, jenkins project testquality updater plugin +1 morePlaintext Storage of a Password in Jenkins TestQuality Updater Plugin5.5 Medium
- jenkins view-cloner, jenkins project view-cloner plugin +1 morePasswords stored in plain text by Jenkins view-cloner Plugin6.5 Medium
- jenkins github pull request coverage status, jenkins project github pull request coverage status plugin +1 morePlaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin5.5 Medium
- jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 morePlaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin5.5 Medium
- keepass** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write...5.5 Medium
- solarwinds database performance analyzer (dpa), database performance analyzer +1 moreSensitive Information Disclosure Vulnerability7.5 High
- zyxel ax7501-b0 firmwareA pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0...6.5 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This...6.2 Medium
- ibm security verify governanceIBM Security Verify Governance information disclosure4.1 Medium
- apache james, apache software foundation james mime4j +1 moreApache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider5.5 Medium
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation information disclosure4.6 Medium
- wecube-platform project wecube-platformAn issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the...7.5 High
- ge inet 900 firmware, inet ii 900 firmware, sd1 firmware +5 more +7 moreCertain General Electric Renewable Energy products store cleartext credentials in flash memory....4.6 Medium
- ibm security verify governance, identity manager, security verify governance +1 moreIBM Security Verify Governance, Identity Manager information disclosure5.3 Medium
- solarwinds hybrid cloud observability (hco)/ solarwinds platform, platform +1 moreSensitive Data Disclosure Vulnerability5.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to the logging of...5.5 Medium
- arc informatique pcvueA cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through...5.5 Medium
- ixpdata easyinstallIXPdata EasyInstall 6.6.14725 contains an access control issue.8.8 High
- airtable, airtable airtable.js +1 moreAirtable.js credentials exposed in browser builds7.6 High
- sz-fujia ourphotoThe /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password...7.5 High
- mitsubishi electric corporation gx developer, gx works2, gx works3 +2 moreCleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric...3.7 Low
- mitsubishi electric corporation gx works3, motion control setting(gx works3 related software) +1 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3...6.8 Medium
- mitsubishi electric corporation gx works3, mx opc ua module configurator-r +1 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 all...8.6 High
- h2database h2Password exposure in H2 Database8.4 High
- hitachi energy pcm600, 650 connectivity package, 670 connectivity package +8 more +10 moreCleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 Products7.1 High
- xwiki, xwiki xwiki-platform +1 morePlaintext storage of password in org.xwiki.platform:xwiki-platform-security-authentication-default6.2 Medium
- siemens qms automotiveA vulnerability has been identified in QMS Automotive (All versions). User credentials are stored...7.6 High
- passworkThe PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the...7.5 High
- passworkThe PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext...7.5 High
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation information disclosure5.3 Medium
- ibm business automation workflow"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20...4.3 Medium
- ibm cognos analytics"IBM Cognos Analytics 11.2.1, 11.2.0, 11.1.7 stores user credentials in plain clear text which...6.5 Medium
- ibm security guardiumIBM Security Guardium information disclosure4.4 Medium
- mozilla firefoxLogins saved by Firefox should be managed by the Password Manager component which uses encryption...3.3 Low
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreException logging in Sharepoint app reveals clear-text connection details4.0 Medium
- Show moreLoading…