CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla thunderbirdUsing remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This...4.3 Medium
- moodleMoodle: user information visibility control issues in gradebook reports5.3 Medium
- combodo itopPassword is stored in clear in the database in Combodo iTop3.4 Low
- svakom siime eye firmwareAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created...5.4 Medium
- tp-link tapo h100 firmware, tapo h100 iot smart hub +1 moreInformation Disclosure Vulnerability in TP-Link IoT Smart Hub4.4 Medium
- bitrix bitrix24Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100...6.8 Medium
- mintplex-labs mintplex-labs/anything-llm, miniplex labs labs\/anything lim, mintplexlabs anythingllm +2 moreImproper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llm5.9 Medium
- philips lighting (signify innovations india) smart bulb 9,10,12-watt, smart t-bulb 10,12-watt, smart wi-fi led batten 24-watt +8 more +10 moreCleartext Storage of Sensitive Information Vulnerability in Philips Lighting Devices7.0 High
- schneider electric evlink home smart, charge +1 moreCWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test...8.5 High
- linuxfoundation zowe api mediation layer, open mainframe project zowe +1 moreConformance validation endpoint discloses detail about service to unauthenticated users5.3 Medium
- linuxfoundation zowe api mediation layer, open mainframe project zowe +1 moreHealth endpoint offers list of onboarded services to unauthenticated users5.3 Medium
- palo alto networks expeditionExpedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure8.2 High
- finrota, finrota netahsilat +1 moreCleartext Storage of Username and Password in Finrota's Netahsilat8.2 High
- openc3 cosmosOpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)4.8 Medium
- cisco data center network manager, nexus dashboard fabric controller +1 moreCisco Nexus Dashboard Fabric Controller Credential Information Disclosure Vulnerability6.3 Medium
- infinera tnms, nokia transcend network management system +1 moreIn Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive...7.7 High
- nokia transcend network management systemCleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19...6.5 Medium
- planet gs-4210-24p2s firmware, gs-4210-24pl4c firmware, planet technology gs-4210-24p2s hardware 3.0 +2 more +4 morePLANET Technology switch devices - Cleartext storage of SNMPv3 users' passwords7.2 High
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. Sensitive information inside diagnostic...6.6 Medium
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in...8.8 High
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information...6.5 Medium
- topquadrant topbraid edgTopQuadrant TopBraid EDG password manager stores external credentials insecurely3.0 Low
- oceanic software valeappCleartext Storage of Sensitive Information in Oceanic Software's ValeApp9.3 Critical
- ovirt ovirt-engine, red hat virtualization 4 +1 moreOvirt-engine: potential exposure of cleartext provider passwords via web ui4.9 Medium
- boldgrid w3 total cacheW3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext3.7 Low
- moxa mxview one central manager series, mxview one, mxview one central manager +1 more +3 moreMXview One and MXview One Central Manager Series store cleartext credentials in a local file6.8 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System Password cleartext storage in a file or on disk4.6 Medium
- kastle systems access control system, kastle access control system firmware +1 moreCleartext Storage of Sensitive Information in Kastle Systems Access Control System8.7 High
- eaton foreseer, foreseer electrical power monitoring system +1 moreThe Eaton Foreseer software provides the feasibility for the user to configure external servers...6.3 Medium
- texas instruments fusion digital power designerAn issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to...5.5 Medium
- no-ip ducNo-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command...9.1 Critical
- palo alto networks activemq content packActiveMQ Content Pack: Cleartext Exposure of Credentials6.0 Medium
- fortinet forticlient, forticlientios +1 moreA cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting...3.9 Low
- c-mor video surveillance, za-internet c-mor video surveillance +1 moreAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is...8.8 High
- linux, linux kernel +1 moreKEYS: trusted: dcp: fix leak of blob encryption key5.5 Medium
- idec windldr, idec corporation windo/i-nv4, idec windo\/i-nv4 +2 moreCleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If...8.1 High
- tinacms, ssw tinacms\/cli +1 moreTina search token leak via lock file in TinaCMS7.5 High
- nac nacpremiumCleartext Username and Password in NAC Telecommunication's NACPremium8.7 High
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreHandling of sensitive data in process memory in NetIQ Advance Authentication8.1 High
- mattermostEmail addresses of remote users visible in props regardless of server settings4.3 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Cleartext Exposure of External System Secrets6.0 Medium
- siemens omnivise t3000 application server r9.2, omnivise t3000 domain controller r9.2, omnivise t3000 network intrusion detection system (nids) r9.2 +17 more +19 moreA vulnerability has been identified in Omnivise T3000 Application Server (All versions), Omnivise...8.3 High
- hms-networks ewon cosy\+ firmware, ewon cosy firmware +1 moreInsecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a...7.5 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreInsecure Storage of Sensitive Information Vulnerability7.0 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreDefault Credential Storage in Plaintext Vulnerability7.0 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreHard-coded Credentials Vulnerability5.2 Medium
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreCleartext Storage of Sensitive Information Vulnerability7.0 High
- huawei emui, harmonyos +1 morePlaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this...6.2 Medium
- ruijie eg-2000se firmwareAn issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext...7.5 High
- Show moreLoading…