CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- tp-link tapoIncorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user...6.5 Medium
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x...7.5 High
- aiven journalpumpInformation Disclosure Vulnerability in Journalpump6.5 Medium
- efacec uc 500e, uc 500e firmware +1 moreCleartext Transmission of Sensitive Information in EFACEC UC 500E6.3 Medium
- senec storage box v1, enbw senec storage box firmware, senec storage box v2 +1 more +3 moreSENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted9.1 Critical
- arista mosOn Arista MOS configuration of a BGP password will cause the password to be logged in clear text.5.9 Medium
- samsung keyboardImproper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to...6.5 Medium
- loytec l-inx configuratorLOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. An admin...7.5 High
- loytec l-inx configuratorLOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP Basic Authentication, which transmits...7.5 High
- digital communications technologies syrus4 iot telematics gateway, digitalcomtech syrus 4g iot telematics gateway firmware +1 moreData leakage and arbitrary remote code execution in Syrus cloud devices10.0 Critical
- siemens comosA vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the...3.5 Low
- loytec linx-212 firmware, liob-586 firmware, lvis-3me12-a1 firmware +2 moreLOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3...7.5 High
- loytec linx-212 firmware, liob-586 firmware, lvis-3me12-a1 +1 more +3 moreLOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3...7.5 High
- botan project botanbcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length...7.5 High
- moxa pt-g503 series, eds-g503 firmware +1 moreCookie Without Secure Flag3.1 Low
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +4 more +6 moreThe Android Client application, when enrolled with the define method 1 (the user manually...8.3 High
- ibm security verify governanceIBM Security Verify Governance information disclosure4.1 Medium
- ibm cognos dashboards on cloud pak for dataIBM Cognos Dashboards information disclosure5.9 Medium
- ibm cognos dashboards on cloud pak for dataIBM Cognos Dashboards information disclosure5.9 Medium
- dexma dexgateCleartext Transmission of Sensitive Information in DEXMA DEXGate6.3 Medium
- baker hughes - bently nevada bently nevada 3500 system, bakerhughes bentley nevada 3500 system firmware +1 moreBaker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information6.8 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.9 Medium
- delta electronics wplsoftDelta Electronics WPLSoft Modbus cleartext transmission3.7 Low
- sick apu0200 firmware, sick ag apu0200 +1 moreCleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged...5.9 Medium
- qnap qvpn, qnap systems inc. qvpn windows +1 moreQVPN Device Client5.2 Medium
- redhat openshift data science, opendatahub open data hub dashboard, red hat openshift data science (rhods) +2 moreS3 credentials included when exporting elyra notebook7.7 High
- riello ups netman-204, riello-ups netman 204 firmware +1 moreInformation disclosure in NetMan 2045.3 Medium
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +1 more +3 moreBIG-IP APM Clients TunnelCrack vulnerability6.8 Medium
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +1 more +3 moreBIG-IP APM Clients TunnelCrack vulnerability5.3 Medium
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreCleartext Transmission of Sensitive Information in Ormazabal products5.7 Medium
- fit2cloud cloudexplorer liteAn issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the...7.5 High
- red hat openstack platform 16.2, redhat openstack platform +1 morePlain-text passwords saved in /var/log/messages4.4 Medium
- redhat keycloak, red hat single sign-on 7 +1 morePlaintext storage of user password8.8 High
- siemens qms automotiveA vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected...7.3 High
- open automation software oas platformAn authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation...8.1 High
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- esri arcgis enterprise server, arcgis server +1 moreBUG-000158039 - There is an information disclosure issue in ArcGIS Server.5.3 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero and QuTScloud3.5 Low
- avira phantom vpnAn issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely...7.3 High
- clario vpnAn issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client...5.7 Medium
- clario vpnAn issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client...6.3 Medium
- asus rt-ac66u b1, rt-ac66u b1 firmware +1 moreASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.7.5 High
- cloudflare warpPlaintext transmission of DNS requests in Windows 1.1.1.1 WARP client7.4 High
- intergard sgs, smartgard silver with matrix keyboard +1 moreIntergard SGS SQL Query cleartext transmission3.7 Low
- intergard sgs, smartgard silver with matrix keyboard +1 moreIntergard SGS Password Change cleartext transmission3.7 Low
- hitachi device managerCleartext Transmission Vulnerability in Hitachi Device Manager9.0 Critical
- becton dickinson & co cqi reporter, bd guardrails cqi reporter +1 moreCQI Data Sniffing3.5 Low
- ysoft safeq serverAn issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP...6.5 Medium
- maruiAn issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to...7.5 High
- sick ag icr890-4, sick icr890-4 firmware +1 moreCleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote...7.5 High
- Show moreLoading…