CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- telpo mdmTelpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT...9.1 Critical
- minova information services gmbh ttaMINOVA TTA Information Disclosure and Credential Exposure9.3 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)5.6 Medium
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Cleartext Exposure of Credentials5.9 Medium
- zkteco co wl20 biometric attendance systemInformation Disclosure Vulnerability in ZKTeco WL205.2 Medium
- zkteco co wl20 biometric attendance systemCleartext Storage Vulnerability in ZKTeco WL207.0 High
- siemens power meter sicam q100, power meter sicam q200 family +1 moreA vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions ...6.8 Medium
- siemens power meter sicam q100, power meter sicam q200 family +1 moreA vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions ...6.8 Medium
- vedo suite project suiteInsecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in...8.6 High
- exrick xbootExrick xboot getMenuList sensitive information in a cookie6.3 Medium
- ansible django-ansible-base, red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +2 morePython3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap4.4 Medium
- aziot 2mp full hd smart wi-fi cctv home security camera firmwareThe firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02)...7.8 High
- sandboxie-plus sandboxieSandboxie exposes encrypted sandbox key during password change6.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg...5.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots5.5 Medium
- No product listedAn issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. When a new SD card is inserted...9.8 Critical
- medtronic mycarelink patient monitor 24950, mycarelink patient monitor 24952 +1 moreMedtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability6.8 Medium
- two app studio journeyInsecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS5.5 Medium
- trendnet tew-wlc100p firmwareIn the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of...7.5 High
- broadcom brocade ascg, brocade ascg +1 moreCLI history displays inline passwords6.8 Medium
- digisol xpon onu wi-fi router (dg-gr6821ac)Default Credential Vulnerability in Digisol DG-GR6821AC Router5.1 Medium
- digisol xpon onu wi-fi router (dg-gr6821ac)Cleartext Storage Vulnerability in Digisol DG-GR6821AC Router5.1 Medium
- No product listedKaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials (for privileged...8.2 High
- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users6.5 Medium
- jenkins kryptowire, jenkins project kryptowire plugin +1 moreJenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API key6.5 Medium
- jenkins nouvola divecloud, jenkins project nouvola divecloud plugin +1 moreJenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted credentials6.5 Medium
- fnkvision fnk-gu2FNKvision FNK-GU2 wpa_supplicant.conf cleartext storage1.0 Low
- endress meac300-fnade4 firmware, endress+hauser meac300-fnade4 +1 moreCVE-2025-274607.6 High
- junit-team junit-frameworkJUnit OpenTestReportGeneratingListener can leak Git credentials5.8 Medium
- canonical juju utils, juju\/utils +1 moreKey leakage in juju/utils certificates6.5 Medium
- checkpoint smartconsole, check point smartconsole +1 moreSmartConsole Sensitive Credential Exposure via Memory Dump6.1 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbCleartext Phonebook Information5.7 Medium
- bharti airtel thanks appBharti Airtel Thanks App files cleartext storage in a file or on disk2.4 Low
- flock safety license plate reader, flocksafety license plate reader firmware +1 moreFlock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage...2.0 Low
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 moreFlock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.2.0 Low
- lenze plc designer v4Lenze: Plaintext Password Disclosure in PLC Designer V4 Interface5.5 Medium
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreUnencrypted HTTP Communication3.1 Low
- numan react-native-keysreact-native-keys insecurely stores encryption cipher and Base64 chunks7.5 High
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server information disclosure6.5 Medium
- tinxy wifi lock controller v1 rf firmwareTinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including...7.5 High
- dell thinosDell ThinOS 2502 and prior contain a Cleartext Storage of Sensitive Information vulnerability. A...5.7 Medium
- mauticMautic does not shield .env files from web traffic5.1 Medium
- be-tech mifare classic cardsUnauthorized creation of master key in Mifare Classic Be-Tech cards6.8 Medium
- phonepePhonePe App SQLite Database databases cleartext storage in file4.6 Medium
- itech-gmbh ilabclientThe local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext...5.5 Medium
- tecno com.transsion.aivoiceassistantInsufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant)...6.2 Medium
- ruoyi ruoyi-vueyangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie2.3 Low
- phpgt domphpgt/Dom exposes the GITHUB_TOKEN in Dom workflow run artifact7.1 High
- tenda rx2 pro firmwareCleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro...8.2 High
- tenda rx2 pro firmwareCleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro...8.2 High
- Show moreLoading…