CWE-315: Cleartext Storage of Sensitive Information in a Cookie
The product stores sensitive information in cleartext in a cookie.
A kind of CWE-312 Cleartext Storage of Sensitive Information.
From the CWE List. © The MITRE Corporation.
Newest
- No product listed HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and... 9.1 Critical
- exrick xboot Exrick xboot getMenuList sensitive information in a cookie 6.3 Medium
- ruoyi ruoyi-vue yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie 2.3 Low
- flatpress FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via... 8.1 High
- oceanic software valeapp Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp 9.3 Critical
- 1panel-dev 1panel 1Panel set-cookie is missing the Secure keyword 6.5 Medium
-
dbt-corePyPI dbt-core's secret env vars written to package-lock.json in plaintext 3.2 Low - pepperl-fuchs wha-gw-f2d2-0-as- z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 more In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie 5.5 Medium
- qnap qts, quts hero, qutscloud +2 more Cleartext Storage of Sensitive Information in Cookies 7.5 High