CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- huawei emui, magic ui +1 moreThere is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of...5.3 Medium
- mcafee database security, mcafee,llc mcafee database security (dbsec) +1 moreCleartext Transmission of Sensitive Information in McAfee DBSec3.2 Low
- f5 nginx controllerIntra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before...7.4 High
- abinitio control\>centerLocal File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote...6.5 Medium
- couchbase serverAn issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2....4.9 Medium
- couchbase serverAn issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is...5.9 Medium
- couchbase serverAn issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View...4.4 Medium
- sitel cap/prx, sitel-sa remote cap\/prx firmware +1 moreSITEL CAP/PRX cleartext transmission of sensitive information6.5 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a...5.9 Medium
- moxa nport ia5150a firmware, nport ia5250a firmware, nport ia5450a firmware +2 moreCleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial...7.5 High
- moxa nport ia5150a firmware, nport ia5250a firmware, nport ia5450a firmware +2 moreThe NPort IA5000A Series devices use Telnet as one of the network device management services....5.9 Medium
- jetbrains webstormIn JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.7.5 High
- agenziaentrate desktop telematicoAgenzia delle Entrate Desktop Telematico 1.0.0 contacts the jws.agenziaentrate.it server over...5.3 Medium
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. It uses cleartext HTTP to check,...8.1 High
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize...5.3 Medium
- kde messagelibKDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations....6.5 Medium
- google google\/apple exposure notificationsGAEN (aka Google/Apple Exposure Notifications) through 2021-04-27 on Android allows attackers to...3.3 Low
- pgsync project pgsyncPgsync Contains Cleartext Transmission of Sensitive Information7.5 High
- the foreman foremanA smart proxy that provides a restful API to various sub-systems of the Foreman is affected by...5.9 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2...7.5 High
- fibar group s.a fibaro home center, fibaro home center 2 firmware, home center lite firmware +2 moreFibaro Home Center Unencrypted management interface8.1 High
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for windows +1 moreTransmission of data in clear text by McAfee ENS4.8 Medium
- mcafee content security reporter, mcafee,llc mcafee content security reporter (csr) +1 moreClear text exposure of password in McAfee CSR ePO extension4.3 Medium
- netgear r7800, br200 firmware, br500 firmware +41 more +43 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- lenovo xclarity controller (xcc), xclarity controller +1 moreAn internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC...4.5 Medium
- netop vision proCleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1...8.8 High
- birb-digital wrongthinkPartial secret key disclosure, improper safety number calculation, & inadequate encryption strength8.1 High
- advantech spectre rt ert351 firmwareAdvantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in...7.5 High
- taidii diibearThe Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view...5.5 Medium
- lenovo xclarity orchestratorAn internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials...4.9 Medium
- lenovo xclarity orchestratorAn internal product security audit of LXCO, prior to version 1.2.2, discovered that optional...4.9 Medium
- ibm api connectIBM API Connect V10 is impacted by insecure communications during database replication. As the...5.9 Medium
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...8.3 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...8.3 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology...9.0 Critical
- schneider-electric powerlogic ion7400 firmware, powerlogic ion7650 firmware, powerlogic ion8300 firmware +7 more +9 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic...7.5 High
- schneider-electric powerlogic ion7300 firmware, powerlogic ion7400 firmware, powerlogic ion7650 firmware +9 more +11 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic...7.5 High
- agora video software development kitCleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote...5.9 Medium
- tp-link archer c5v firmwareIn the management interface on TP-Link Archer C5v 1.7_181221 devices, credentials are sent in a...7.1 High
- ibm security verify information queueIBM Security Verify Information Queue information disclosure5.9 Medium
- mongodb ops managerSSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager6.7 Medium
- lenovo xclarity administratorAn internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0...4.9 Medium
- panasonic video insight vmsVideo Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with...9.8 Critical
- linuxfoundation harbor"catalog's registry v2 api exposed on unauthenticated path in Harbor"5.3 Medium
- mediawikiThe API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials,...7.5 High
- reolink rlc-410 firmware, rlc-422 firmware, rlc-423 firmware +7 more +9 moreReolink P2P Cameras7.5 High
- octopus octopusdscCleartext Storage of Sensitive Information6.2 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain...2.6 Low
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or...4.3 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive...5.9 Medium
- Show moreLoading…