CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- dell wyse management suiteWyse Management Suite versions prior to 4.0 contain a sensitive information disclosure...4.4 Medium
- intergard sgs, smartgard silver with matrix keyboard +1 moreIntergard SGS sensitive information in memory4.3 Medium
- weave gitops terraform controller, weaveworks tf-controller +1 moreInformation Disclosure Vulnerability in Weave GitOps Terraform Controller8.5 High
- thm feedbacksystemStoring unencrypted LDAP passwords in feedbacksystem6.0 Medium
- albisAn issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive...7.5 High
- cisco duo authentication proxy, duo authentication proxy +1 moreA vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an...4.9 Medium
- fortinet fortiauthenticator, fortios +1 moreA clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6...5.3 Medium
- sick ag icr890-4, sick icr890-4 firmware +1 moreCleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local...5.3 Medium
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +7 more +9 more?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in...6.5 Medium
- makves dcapAn access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain...7.5 High
- ibm security directory suite vaIBM Security Directory Suite VA information disclosure5.3 Medium
- atlas copco power focus, atlascopco power focus 6000 firmware +1 moreCVE-2023-18979.4 Critical
- danfoss ak-em100, ak-em100 firmware +1 moreCleartext credentials in Danfoss AK-EM1007.5 High
- bitwardenBitwarden Desktop v1.20.0 and above stores the biometric key in plaintext which allows a local...7.1 High
- contec conprosys hmi system, contec co., ltd. conprosys hmi system (chs) +1 morePlaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3....8.1 High
- dell powerpath, powerpath windows +1 morePowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext...5.5 Medium
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console...4.6 Medium
- simple design daily journal, simpledesign diary with lock\ +1 moreSimple Design Daily Journal SQLite Database cleartext storage in a file or on disk2.3 Low
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure6.2 Medium
- jenkins ansible, jenkins project ansible plugin +1 moreJenkins Ansible Plugin job configuration form does not mask variables5.3 Medium
- jenkins ansible, jenkins project ansible plugin +1 moreJenkins Ansible Plugin stores and displays secrets in plain text4.3 Medium
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreCleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214,...5.3 Medium
- seiko solutions inc. skybridge mb-a100/110, seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +2 moreCleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0...6.5 Medium
- google androidIn onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there...5.5 Medium
- gradle build action, gradle-build-action +1 moreGradle Build Action data written to GitHub Actions Cache may expose secrets7.6 High
- 42gears surelock, surelock windows +1 morePlaintext Password in Registry6.5 Medium
- lightbend alpakka kafkaLightbend Alpakka Kafka logs credentials on debug level5.5 Medium
- ribose rnpRibose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.7.5 High
- enterprisedb postgres advanced serverEnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in...7.5 High
- strapiStrapi leaking sensitive user information by filtering on private fields4.9 Medium
- tigergraph enterprise, cloud +1 moreAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is logging of user...4.9 Medium
- jenkins consul kv builder, jenkins project consul kv builder plugin +1 moreJenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted6.5 Medium
- jenkins consul kv builder, jenkins project consul kv builder plugin +1 moreJenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted4.3 Medium
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form6.5 Medium
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller4.3 Medium
- jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controller4.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Exposure of Sensitive Information Vulnerability4.1 Medium
- yokogawa centum cs 1000, centum cs 3000, centum cs 3000 entry class +6 more +8 moreCENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of...7.8 High
- statamic cms, xunruicms +1 moreXunrui CMS system_log.html information disclosure4.3 Medium
- sambaThe fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi...6.5 Medium
- stimulsoft designerIn Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the...5.5 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Information Disclosure Vulnerability4.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreAuthenticated Sensitive Information Disclosure in ClearPass Policy Manager4.5 Medium
- fortinet fortianalyzerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...4.6 Medium
- sophos connect, connect client +1 moreAn information disclosure vulnerability allows sensitive key material to be included in technical...5.5 Medium
- smeup erpSme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability...7.5 High
- aremis 4 nomadsAn issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a...4.1 Medium
- mv idigital clinic enterprise project idigital clinic enterpriseMV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext.6.5 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure5.9 Medium
- ibm maximo asset management, maximo application suite +1 moreIBM Maximo Asset Management information disclosure5.3 Medium
- Show moreLoading…