CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- omron cj2h plc, cj2m plc, cx-programmer +2 moreOmron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1...5.0 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreCleartext Transmission of Sensitive Information in Apache CXF4.3 Medium
- python setuptoolsSetuptools vulnerable to Man-in-the-middle attacks6.8 Medium
- google chrometranslate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7...5.0 Medium
- joomla joomla\!Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which...7.5 High
- cisco linksys wvc54gc firmwareThe Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext...7.5 High
- storcentric retrospect backup clientEMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified...7.5 High
- oki c5510mfp firmwareOKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the...7.5 High
- baculamake_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command...5.5 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2...5.3 Medium
- procom netforce 800 firmwareProcom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map ...7.5 High
- padl nss ldap, pam ldap +1 morepam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use...5.0 Medium
- solarwinds dameware mini remote controlDameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption...5.0 Medium
- iomega nas a300u firmwareThe Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits...7.5 High