CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow...7.4 High
- qnap qtsCleartext Transmission of Sensitive Information in SNMP7.5 High
- bilancAn issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and below. Its...7.4 High
- mersive solstice pod firmwareIn Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted...5.9 Medium
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series7.5 High
- lantronix xport edge firmwareAn information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of...3.1 Low
- hcl bigfix inventory, hcltech bigfix platform +1 moreBigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https...5.3 Medium
- quickheal total securityQuick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text.5.9 Medium
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1...5.9 Medium
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...5.9 Medium
- genexis platinum 4410 firmwareUPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 has an action ...6.5 Medium
- basetech ge-131 bt-1837836 firmwareCleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836...7.5 High
- nexcom nio 50 firmwareThe affected product transmits unencrypted sensitive information, which may allow an attacker to...7.5 High
- vmware pivotal schedulerScheduler for TAS can transmit privileged UAA token in plaintext8.6 High
- synology diskstation manager (dsm), diskstation manager +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation...6.5 Medium
- synology router manager, router manager (srm) +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager ...6.5 Medium
- mintegral mintegraladsdkInformation Exposure4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve...7.5 High
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20...7.5 High
- rubetek rv-3406 firmware, rv-3409 firmware, rv-3411 firmware +2 moreA Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras ...8.1 High
- gradle enterpriseAn issue was discovered in Gradle Enterprise before 2020.2.5. Lack of the secure attribute on the...5.3 Medium
- siemens siveillance video clientA vulnerability has been identified in Siveillance Video Client (All versions). In environments...5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, arista access point, debian linux +11 more +13 moreu'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead...6.5 Medium
- jenkins, jenkins soapui pro functional testing, jenkins project soapui pro functional testing plugin +2 morePasswords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin4.3 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain...5.9 Medium
- niscomed m1000 multipara patient monitor firmwareAn issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an...7.8 High
- ncr aptra xfs, selfserv atm +1 moreNCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the...7.1 High
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin SMTP password transmitted and displayed in plain text7.5 High
- cs2-network p2pCS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an...5.9 Medium
- digitus da-70254 firmwareDIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same...8.8 High
- lindy-international 42633 firmwareLindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same...8.8 High
- tp-link tl-ps310u firmwareTP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same...8.8 High
- kde kmail, debian linux +1 moreKDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI...6.5 Medium
- espressif esp-idf, esp8266 nonos sdk, esp8266 rtos sdk +2 moreAn encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2,...6.8 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which...6.8 Medium
- duo duoconnect, cisco duo connect +1 moreDuoConnect SSH Connection Vulnerability4.8 Medium
- siemens simatic hmi basic panels 2nd generation (incl. siplus variants), simatic hmi comfort panels (incl. siplus variants), simatic wincc runtime advanced +8 more +10 moreA vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS...6.5 Medium
- atlassian bitbucket, bitbucket server +1 moreAtlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to...6.5 Medium
- nordicsemi android ble library, dfu library +1 moreNordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android...6.5 Medium
- dronecode micro air vehicle link, px4 mavlink +1 moreRVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.07.5 High
- jenkins stash branch parameter, jenkins project stash branch parameter plugin +1 morePasswords transmitted in plain text by Jenkins Stash Branch Parameter Plugin4.3 Medium
- f5 nginx controllerIn NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is...7.8 High
- biotronik cardiomessenger ii-s gsm firmware, cardiomessenger ii-s t-line firmware +1 moreBIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to...4.3 Medium
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use...7.5 High
- baxter prismaflex firmware, prismax firmware +1 moreBaxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not...7.5 High
- baxter prismaflex firmware, prismax firmware +1 moreBaxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not...7.5 High
- baxter phoenix x36 firmwarePhoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not...7.5 High
- baxter sigma spectrum infusion system firmwareSigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System...9.8 Critical
- honeywell controledge plc, controledge rtu, controledge plc firmware +1 more +3 moreControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes...7.5 High
- honeywell controledge plc, controledge rtu, controledge plc firmware +1 more +3 moreControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes...7.5 High
- Show moreLoading…