CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- axis os, os 2020, os 2022 +2 moreJohan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may...5.3 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreInsecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Leak of admin password and passwords6.5 Medium
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...5.1 Medium
- securenvoy mfa, multi-factor authentication solutions +1 moreMultiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper...7.5 High
- opensourcelabs skyscraperSkyScrape Secure API Requests6.4 Medium
- targit decision suite 23.2.15007.0In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session.7.5 High
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords...6.5 Medium
- nasa ait-core, ait core +1 moreAn issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary...7.5 High
- nasa ait-core, ait core +1 moreNASA AIT-Core vulnerable to remote code execution7.5 High
- nasa ait-core, ait core +1 moreNASA AIT-Core vulnerable to remote code execution7.5 High
- nasa ait-core, ait core +1 moreNASA AIT-Core vulnerable to remote code execution7.5 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...9.0 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series7.0 High
- nvidia chatrtxCVE5.5 Medium
- No product listedAn issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge...7.1 High
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 morePlatform: insecure websocket used when interacting with eda server8.1 High
- broadcom brocade sannav, brocade sannav +1 moreSyslog traffic sent in clear-text8.6 High
- octopus serverIt is possible for an API key to be logged in clear text in the audit log file after an invalid...4.3 Medium
- jstnmcbrd dectalk-ttsUse of Unencrypted HTTP Request in dectalk-tts8.2 High
- puwellcloudtech 360eyes proPuwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive...6.5 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission of...7.3 High
- wyrestorm apollo vx20, apollo vx20 firmware +1 moreAn issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can...9.1 Critical
- ciliumCilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies6.1 Medium
- ciliumCilium has possible unencrypted traffic between nodes when using IPsec and L7 policies6.1 Medium
- softing edgeaggregator, edgeconnector +1 moreCleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator8.0 High
- delinea distributed engine, secret server +1 moreInsecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3...5.9 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Lack of SSL support in CHARX Series8.7 High
- ibm watson cp4d data storesIBM Watson CP4D Data Stores information disclosure4.5 Medium
- ibm mq operatorIBM MQ Container information disclosure6.2 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security information disclosure5.9 Medium
- b&r industrial automation automation studio, technology guarding +1 moreB&R products use insufficient communication encryption8.3 High
- ciliumUnencrypted traffic between pods when using Wireguard and an external kvstore6.1 Medium
- ciliumCilium has unencrypted ingress/health traffic when using Wireguard transparent encryption6.1 Medium
- dell esi (enterprise storage integrator) for sap lama, enterprise storage integrator for sap lama, enterprise storage integrator for sap landscape management +2 moreDELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Printing Service Spoofing Vulnerability7.5 High
- hcl software sametimeHCL Sametime is impacted by a sensitive information disclosure1.7 Low
- ibm sterling b2b integratorIBM Sterling B2B Integrator information disclosure4.3 Medium
- ibm security verify access, security verify access appliance, security verify access docker +2 moreIBM Security Verify Access information disclosure7.5 High
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx Cleartext Transmission of Sensitive Information5.7 Medium
- ibm powerscIBM PowerSC information disclosure5.9 Medium
- meross msh30q firmwareMeross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the...5.7 Medium
- shelly trv firmwareCleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local...5.5 Medium
- popsdiabetes rebelThe POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System,...4.3 Medium
- cdebyte e880-ir01 firmwareAn issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information...7.5 High
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreCleartext Submission of Password vulnerability in Skyworth Router7.5 High
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreCleartext Submission of Password vulnerability in Skyworth Router7.5 High
- microsoft microsoft.data.sqlclient, system.data.sqlclient, .net +18 more +20 moreMicrosoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability8.7 High
- moxa oncell g3150a-lte series, oncell g3150a-lte firmware +1 moreOnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials5.3 Medium
- sesami cash point \& transport optimizerAn issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718),...7.5 High
- Show moreLoading…