CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- jenkins dingding json pusher, jenkins project dingding json pusher plugin +1 moreDisplayed in plain text by Dingding JSON Pusher Plugin4.3 Medium
- jenkins dingding json pusher, jenkins project dingding json pusher plugin +1 moreTokens stored in plain text by Dingding JSON Pusher Plugin4.3 Medium
- jenkins openid, jenkins project openid connect authentication plugin +1 morePassword stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin6.7 Medium
- siemens simatic step 7 (tia portal), simatic step 7 +1 moreA vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An...4.2 Medium
github.com/treeverse/lakefsGolakeFS logs S3 credentials in plain text8.4 High- insyde insydeh2o, fujitsu celsius c780 firmware, celsius h5511 firmware +184 more +186 moreA LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28...5.5 Medium
- loytec linx-151 firmware, linx-212 firmware +1 moreLOYTEC electronics GmbH LINX-212 6.2.4 and LINX-151 7.2.4 are vulnerable to Insecure Permissions...7.5 High
- loytec linx-151 firmware, linx-212 firmware +1 moreLOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 firmware 7.2.4 are vulnerable to...7.5 High
- loytec l-inx configuratorLOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. Cleartext...7.5 High
- codeigniter shieldCleartext Storage of Sensitive Information in codeigniter4/shield5.0 Medium
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential...6.5 Medium
- nautobot nautobot-plugin-device-onboardingClear Text Credentials Exposed via Onboarding Task5.7 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server user_ldap app logs user passwords in the log file on level debug4.2 Medium
- zentao bizZentao Biz version 8.7 and before is vulnerable to Information Disclosure.7.5 High
- silabs.com ember znet sdk, silabs emberznet sdk +1 moreKeys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices6.8 Medium
- silabs openthread sdkKeys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices6.8 Medium
- jenkins lambdatest-automation, jenkins project lambdatest-automation plugin +1 moreJenkins lambdatest-automation Plugin may expose Credentials access token6.5 Medium
- nautobotExposure of hashed user passwords via REST API in Nautobot6.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreOAuth2 client_secret stored in plain text in the Nextcloud database6.5 Medium
- zpesystems nodegrid osAn issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows...7.5 High
- f5 big-ip, big-iq, big-ip access policy manager +19 more +21 moreBIG-IP and BIG-IQ Database Variable vulnerability4.3 Medium
- sage 200 spainUse of Cleartext credentials in Sage 200 Spain7.8 High
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: passwords defined in secrets shown in statefulset yaml5.5 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to cleartext storage of sensitive information. The following...5.5 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to cleartext storage of sensitive information in memory. The...2.2 Low
- hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 moreHitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format4.3 Medium
- element-hq synapse, fedoraproject fedora +1 moreTemporary storage of plaintext passwords during password changes in matrix synapse3.7 Low
- fortinet fortitesterA cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through...5.2 Medium
- skyhigh security secure web gateway (swg), skyhighsecurity secure web gateway +1 moreA password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x...6.2 Medium
- tsplus remote workAn issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as...9.8 Critical
- gitlabCleartext Storage of Sensitive Information in GitLab5.5 Medium
- broadcom brocade sannav, brocade sannav +1 morePossible information exposure through log file vulnerability5.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreStorage of clear text password in Brocade SANnav5.4 Medium
- brocade fabric os, broadcom fabric operating system +1 morefirmwaredownload command could log servers passwords in clear text8.6 High
- assaabloy control id gerencia web, control id gerencia web +1 moreControl iD Gerencia Web Cookie cleartext storage3.7 Low
- mariadb maxscaleAn issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password...6.5 Medium
- insyde insydeh2oAn issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System...7.5 High
- zoom video communications, inc. client sdk for windows, zoom meeting software development kit +1 moreCleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow...5.5 Medium
- sap businessobjects business intelligenceInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform4.4 Medium
- phpjabbers class scheduling systemPHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user...6.5 Medium
- fujitsu software infrastructure managerAn issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The...5.9 Medium
- fujitsu software infrastructure manager, fujitsu limited software infrastructure manager advanced edition, software infrastructure manager advanced edition for primeflex +1 more +3 moreFujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's...7.5 High
- connectedio connected ioConnected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing...9.8 Critical
- assmann ht-ip211hdp, ht-ip211hdp firmware +1 moreAssmann Digitus Plug&View IP Camera family allows unauthenticated attackers to download a copy of...7.5 High
- element55 knowmoreElement55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext.7.5 High
- teleadapt roomcast ta-2400, roomcast ta-2400 firmware +1 moreTeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive...7.5 High
- mremotengmRemoteNG configuration files can be stored in an encrypted state on disk. mRemoteNG version <=...7.5 High
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure...5.5 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure...5.5 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure...5.5 Medium
- Show moreLoading…