CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- abb automation builderIncorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information...8.4 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows...6.5 Medium
- bec technologies multiple routers, bectechnologies router firmware +1 moreBEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability4.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet Captures5.9 Medium
- tp-link tapo h200 v1 iot smart hubInformation Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub4.4 Medium
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 moreJenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` Files5.5 Medium
- jenkins stack hammer, jenkins project stack hammer plugin +1 moreJenkins Stack Hammer Plugin Stores API Keys Unencrypted in Job `config.xml` Files5.5 Medium
- jenkins monitor-remote-job, jenkins project monitor-remote-job plugin +1 moreJenkins monitor-remote-job Plugin Stores Passwords Unencrypted5.5 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted4.3 Medium
- valmet dnaValmet DNA user passwords in plain text5.2 Medium
- netis wf-2404Netis WF-2404 BusyBox Shell cleartext storage1.0 Low
- fermax duoxme ios applicationLack of encryption vulnerability in DuoxMe6.9 Medium
- kukufmAn issue in KukuFM Android v1.12.7 (11207) allows attackers to access sensitive cleartext data...7.5 High
- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Configuration File on the client workstation is not encrypted7.1 High
- mogify infotech tinxy 1 node 10a and 16a smart wi-fi switches, tinxy 2, 4 and 6 node smart wi-fi switches, tinxy door lock with wi-fi controller +3 more +5 moreInformation Disclosure Vulnerability in Tinxy Smart Devices5.1 Medium
- tapandsign technologies tap&sign app, tapandsign tap\&sign +1 moreImproper Authentication in Tapandsign Technologies Tap and Sign App6.5 Medium
- thinkware car dashcam f800 pro, f800 pro firmware +1 moreThinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on disk2.4 Low
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission4.3 Medium
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission4.3 Medium
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330...7.5 High
- broadcom brocade sannav, brocade sannav +1 moreClear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave5.5 Medium
- myscada mypro, mypro manager +1 moremySCADA myPRO Manager Cleartext Storage of Sensitive Information9.2 Critical
- salesforce tableau server, tableau server +1 moreSensitive Data Exposure in Tableau Server7.5 High
- ivanti connect secure, policy secure +1 moreCleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...6.0 Medium
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +58 more +60 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 ...5.1 Medium
- solarwinds kiwi syslog ngSensitive data disclosure vulnerability4.6 Medium
- abb aspect-enterprise, matrix series, nexus series +19 more +21 moreCredentials Disclosure - keys9.3 Critical
- ibm applinxIBM ApplinX Information Disclosure4.3 Medium
- pmdPMD Designer's release key passphrase (GPG) available on Maven Central in cleartext9.3 Critical
- zoom communications, inc jenkins marketplace pluginZoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information4.3 Medium
- xerox workplace suiteClear text secrets returned & Remote system secrets in clear text6.5 Medium
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers cleartext storage of anti-theft PIN4.8 Medium
- haydenbleasel next-forgeBASEHUB_TOKEN commited in next-forge6.3 Medium
- No product listedInfoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client...9.1 Critical
- navidromeNavidrome Stores JWT Secret in Plaintext in navidrome.db7.1 High
github.com/gophish/gophishGo,govulncheck-vulndbopenSUSE +1 moreGoPhish sends cleartext passwords7.5 High- fortinet forticlient, forticlientlinux, forticlientwindows +1 more +3 moreA Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0...4.9 Medium
- No product listedAn issue in H3C switch h3c-S1526 allows a remote attacker to obtain sensitive information via the...7.5 High
- ibm openpages with watsonIBM OpenPages with Watson information disclosure4.4 Medium
- tp-link tl-wr845n firmwareTP-Link TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to transmit user...9.8 Critical
- No product listedOxide before 6 has unencrypted Control Plane datastores.5.7 Medium
- pentaminds curovmsPentaminds CuroVMS v2.0.1 was discovered to contain exposed sensitive information.7.5 High
- mogify infotech tinxy, tinxy mobile app, tinxy android app +1 more +3 moreInformation Disclosure Vulnerability in Tinxy5.4 Medium
- tp-link archer c50 wireless routerExposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C504.3 Medium
- veeam backup & replication, backup \& replication +1 moreA vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved...7.7 High
- ibm zhmc, zhmcclient zhmc-ansible-modules +1 moreAnsible collection "ibm.ibm_zhmc" has passwords in clear text in log file and in output of some modules when specified as input8.3 High
- zhmcclient python-zhmcclientPython package "zhmcclient" has passwords in clear text in its HMC and API logs8.3 High
- sharp corporation multiple mfps (multifunction printers)User passwords are decrypted and stored on memory before any user logged in. Those decrypted...5.9 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server User password is available in memory of the PHP process1.8 Low
- No product listedHathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about...2.4 Low
- Show moreLoading…