CWE-312: Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- sap business one, sap se business one (b1 client memory dump files) +1 moreInformation Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)5.8 Medium
- birtech information technologies industry and trade ltd. co. sensewayCleartext password storage in Birtech Information Technologies' Sensaway6.5 Medium
- frangoteam fuxaFUXA Unauthenticated Exposure of Plaintext Database Credentials9.1 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software.3.3 Low
- broadcom sannavSQL queries with sensitive information printed in logs with Brocade SANnav before 3.04.6 Medium
- broadcom sannavPlaintext Switch admin login password is seen in Brocade SANnav support save8.5 High
- broadcom sannavPlain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.07.1 High
- broadcom sannavBrocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)6.0 Medium
- opentext™ verticaCleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.6.9 Medium
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreUnencrypted Flash Storage in dormakaba access manager7.0 High
- dormakaba access manager 92xx-k5Secrets Stored in Plaintext in Database in dormakaba access manager6.9 Medium
- dell objectscale, elastic cloud storage +1 moreDell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0,...5.5 Medium
- rockwell automation verve asset managerVerve Asset Manager – Plaintext Storage Vulnerabilities8.8 High
- bluspark global bluvoyixPlaintext Passwords Vulnerability in BLUVOYIX10.0 Critical
- iwt ltd. facesentry access control system, iwt facesentry access control system firmware +1 moreFaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability6.8 Medium
- zzcmsZZCMS User Data Storage user_save.php cleartext storage in file5.1 Medium
- mitsubishi electric corporation gt designer3 version1 (got1000), gt designer3 version1 (got2000) +1 moreInformation Disclosure Vulnerability in GT Designer35.1 Medium
- spenetix ag fusion digital signageSpinetiX Fusion Digital Signage 3.4.8 Unauthenticated Database Backup Disclosure8.7 High
- mailenableMailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB8.4 High
- mailenableMailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV8.4 High
- jenkinsJenkins's build authorization token is stored and displayed in plain text4.3 Medium
- jenkinsJenkins's build authorization token is stored and displayed in plain text4.3 Medium
- meatmeetThe mobile application was found to contain stored credentials for the network it was developed...9.8 Critical
- r radio network radio network fm transmitterR Radio Network FM Transmitter 1.07 System Settings Disclosure8.7 High
- abacre restaurant point of saleAbacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of...7.5 High
- entrust nshield 5c firmware, nshield connect xc base firmware, nshield connect xc high firmware +2 more +4 moreEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a...4.1 Medium
- apache kvrocksApache Kvrocks: MONITOR command reveals plaintext credentials to non-admins5.3 Medium
- mitsubishi electric corporation gx works2Information Disclosure Vulnerability in GX Works25.5 Medium
- komal97 grocerymartAn issue was discovered in file users.json in GroceryMart commit 21934e6 (2020-10-23) allowing...7.5 High
- syrotech sy-gpon-1110-wdont firmwareAn issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers...9.0 Critical
- fs s3150-8t2f firmwareFS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless...7.5 High
- bridgetech vb288 firmwareAn issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware version 5.6...7.5 High
- desktopalert pingalert application serverA vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11...3.3 Low
- nagios log serverNagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Stores Password Reset Tokens in Plain Text6.9 Medium
- gallagher command centre serverCleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could...6.7 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +6 more +8 moreWindows Kernel Security Feature Bypass Vulnerability6.2 Medium
- samsung smart switchCleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local...7.1 High
- samsung smart switchCleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local...5.5 Medium
- yosmart yolink smart hubThe YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used...4.3 Medium
- flocksafety license plate reader firmwareFlock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi...7.5 High
- nvidia dls component of nvidia license systemNVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an...2.4 Low
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) RCE and Password Leaks via API10.0 Critical
- automationdirect click plus c0-0x cpu firmware, click plus c0-1x cpu firmware, click plus c2-x cpu firmware +2 moreAutomationDirect CLICK PLUS Cleartext Storage of Sensitive Information4.1 Medium
- vasion virtual appliance host, print application (saas/va), print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext8.6 High
- microsoft pc managerMicrosoft PC Manager Security Feature Bypass Vulnerability4.0 Medium
- pierre-adrien vasseur obsidian github copilot pluginObsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form....5.1 Medium
- learningcircuit local-deep-researchLocal Deep Research's API keys are stored in plain text6.9 Medium
- suse rancherRancher Fleet Helm Values are stored inside BundleDeployment in plain text7.7 High
- Show moreLoading…