CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- mitsubishi electric corporation melsec iq-r, iq-f, q, l, and fx series cpu modules, mitsubishielectric melsec-fx firmware, melsec-l firmware +3 more +5 moreMitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a...9.8 Critical
- bt ctroms terminal project ctroms terminalAn issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur...8.1 High
- abus secvest wireless control fube50001 firmwareThe wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt...8.1 High
- mutt, canonical ubuntu linux, debian linux +1 more +3 moreMutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.5.9 Medium
- mids\' reborn hero designer project reborn hero designerMids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over...8.1 High
- microsoft visual studio code live share extension, visual studio live share +1 moreAn information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it...5.9 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 High
- dlink dir-865l firmwareD-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information.7.5 High
- palo alto networks pan-osPAN-OS: Panorama context switch session cookie disclosure8.3 High
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive information,...5.9 Medium
- hcltech hcl nomad"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms...5.3 Medium
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +2 moreIn versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure...3.7 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP...9.1 Critical
- f5 big-ip asm, big-ip application security manager +1 moreOn BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP...9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1...8.1 High
- f5 nginx controller, netapp cloud backup +1 moreIn versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP...8.1 High
- f5 nginx controller, netapp cloud backup +1 moreIn versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres...4.8 Medium
- schneider-electric ecostruxure machine expert, modicon m218 firmware, modicon m241 firmware +4 more +6 moreA CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak...7.5 High
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure6.2 Medium
- jetbrains golandIn JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.7.5 High
- titan sf rush smart band firmwareAn issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that...8.1 High
- schneider-electric tristation 1131**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on...7.5 High
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information,...5.9 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext...6.4 Medium
- castlerock snmpc onlineAn issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the...7.5 High
- 3xlogic infinias eidc32 firmware, infinias eidc32 web +1 more3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD=...9.8 Critical
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1...8.1 High
- jenkins project artifactory plugin, jfrog artifactory +1 morePasswords transmitted in plain text by Jenkins Artifactory Plugin7.5 High
- tribalgroup sits\An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component...8.1 High
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted...7.5 High
- moxa iologik 2512-hspa-t firmware, iologik 2512-hspa firmware, iologik 2512-t firmware +17 more +19 moreIn Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility,...7.5 High
- netsas enigma network management solutionNETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It...7.5 High
- netsas enigma network management solutionNETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access...7.5 High
- onap open network automation platformAn issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL...6.5 Medium
- netgear cg3700b firmwareThe Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses HTTP Basic Authentication over...9.8 Critical
- microsoft visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019, visual studio 2019 version 16.4 (includes 16.0 - 16.3) +1 more +3 moreA spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not...3.7 Low
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...8.8 High
- technicolor tc7337net firmwareTechnicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by...9.8 Critical
- wago e!cockpit, e\!cockpit +1 moreA cleartext transmission vulnerability exists in the network communication functionality of WAGO...7.5 High
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreSAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from...9.8 Critical
- jenkins skytap cloud ci, jenkins project skytap cloud ci plugin +1 moreCredentials transmitted in plain text by Skytap Cloud CI Plugin4.3 Medium
- jenkins deployhub, jenkins project deployhub plugin +1 moreCredentials transmitted in plain text by Jenkins DeployHub Plugin4.3 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreCredentials transmitted in plain text by OpenShift Deployer Plugin5.3 Medium
- jenkins backlog, jenkins project backlog plugin +1 moreCredentials transmitted in plain text by Backlog Plugin4.3 Medium
- jenkins quality gates, jenkins project quality gates plugin +1 moreJenkins Quality Gates Plugin transmits credentials in plain text during configuration5.3 Medium
- jenkins sonar quality gates, jenkins project sonar quality gates plugin +1 moreJenkins Sonar Quality Gates Plugin transmits credentials in plain text during configuration5.3 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreCredentials transmitted in plain text by Repository Connector Plugin5.3 Medium
- jenkins logstash, jenkins project logstash plugin +1 moreCredentials transmitted in plain text by Jenkins Logstash Plugin5.3 Medium
- jenkins p4, jenkins project p4 plugin +1 moreMissing permission checks in Jenkins P4 Plugin4.3 Medium
- Show moreLoading…