CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed by using HTTPS when sending information over the network. This issue is...4.3 Medium
- the foreman foreman, redhat satellite +1 moreA flaw was found in Foreman project. A credential leak was identified which will expose Azure...8.8 High
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Cleartext Transmission of Sensitive Information5.7 Medium
- google androidIn Core Utilities, there is a possible log information disclosure. This could lead to local...4.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (open document) +1 moreSAP BusinessObjects Business Intelligence Platform (Open Document) - versions 430, 430, allows an...8.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Defender Credential Guard Information Disclosure Vulnerability4.7 Medium
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1...3.3 Low
- synology note station, note station client +1 moreCleartext transmission of sensitive information vulnerability in authentication management in...6.8 Medium
- omron cp1w-cif41 firmware, cx-programmer, sysmac cj2h firmware +5 more +7 moreOmron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They...7.5 High
- citilogThe server in Citilog 8.0 allows an attacker (in a man in the middle position between the server...5.9 Medium
- jenkins opsgenie, jenkins project opsgenie plugin +1 moreJenkins OpsGenie Plugin vulnerable to Cleartext Transmission of Sensitive Information4.3 Medium
- jenkins build notifications, jenkins project build notifications plugin +1 moreCleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin4.3 Medium
- teleopti wfm, calabrio teleopti workforce management +1 moreTeleopti WFM Administration GetOneTenant Credentials information disclosure4.3 Medium
- yokogawa stardom fcj firmware, stardom fcn firmware, yokogawa electric corporation stardom controller +2 moreCleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller...7.5 High
- illumina iseq 100 instrument, local run manager, miniseq instrument +5 more +7 more3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-3197.4 High
- concretecms concrete cmsCode injection in concrete CMS9.8 Critical
- atviseAn information disclosure vulnerability exists in the License registration functionality of...5.9 Medium
- typo3Information Disclosure via Export Module in TYPO3 CMS4.3 Medium
- igel universal management suiteAn issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission...6.5 Medium
- deltacontrols entelitouch firmwareDelta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and...5.9 Medium
- arista eos, terminattr +1 moreTerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP6.1 Medium
- arista eos, terminattr +1 moreTerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP6.8 Medium
- open automation software oas platformA cleartext transmission of sensitive information vulnerability exists in the OAS Engine...7.5 High
- philips interoperability solution xdsPhilips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information3.7 Low
- suse rancherRancher: Weave CNI password is not set if RKE template is used with CNI value overridden6.8 Medium
- throughtek p2p sdk, kalay p2p software development kit +1 moreThroughTek P2P SDK - Cleartext Transmission of Sensitive Information9.1 Critical
- ibm security identity governance and intelligence, security identity manager +1 moreIBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote...5.3 Medium
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive information7.5 High
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive information7.5 High
- intel celeron g5205u firmware, celeron g5305u firmware, celeron g5900 firmware +456 more +458 moreSensitive information accessible by physical probing of JTAG interface for some Intel(R)...2.4 Low
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...4.3 Medium
- siemens sicam t, 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware +34 more +36 moreA vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All...8.8 High
- dji air 2 firmware, air 2s firmware, fhantom 4 pro firmware +8 more +10 moreDJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone...4.0 Medium
- moxa mxview, mxview series +1 moreAn information disclosure vulnerability exists in the Web Application functionality of Moxa...5.3 Medium
- wisc htcondorAn issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who...7.4 High
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7055 allows authenticated Privilege Escalation on...8.8 High
- zauner arcAn issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of...5.9 Medium
- automation direct click plc cpu modules: c0-1x cpus, automationdirect c0-10are-d firmware, c0-10dd1e-d firmware +18 more +20 moreAutomation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information7.5 High
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Cleartext Transmission of Sensitive Information7.5 High
- ibm iss blackice pc protection, iss blackice pc protection +1 moreISS BlackICE PC Protection Update cleartext transmission3.7 Low
- delta electronics diaenergieDelta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information7.1 High
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 moreGE UR family exposure of sensitive information to an unauthorized actor7.5 High
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information7.5 High
- bluproducts g90 firmware, g9 firmware, luna simo firmware +2 more +4 moreAn issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following...5.5 Medium
- tradingpaints trading paintsAn issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext...7.5 High
- ge cimplicity, general electric proficy cimplicity +1 moreICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext7.5 High
- cobbler project cobblerAn issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol...5.9 Medium
- ibm guardium data encryption, security guardium data encryption +1 moreIBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain...5.9 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials4.3 Medium
- tp-link tl-wr841n, tl-wr841n firmware +1 moreVulnerability in TP-LinK TL-WR841N wireless router8.4 High
- Show moreLoading…