CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- lenovo xclarity administratorA privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA...6.8 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability1.6 Low
- No product listedInfoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client...9.1 Critical
- ixsystems truenas core, truenas firmware +1 moreiXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability3.1 Low
- ibm cognos analytics mobile for android, cognos analytics mobile +1 moreIBM Cognos Analytics Mobile information disclosure5.9 Medium
- red hat build of keycloak, jboss enterprise application platform 8, jboss enterprise application platform expansion pack +2 moreKeycloak: cli option for encrypted jgroups ignored5.7 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure3.7 Low
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.1 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through SPL commands5.3 Medium
- sap se commerce cloudInformation Disclosure vulnerability in SAP Commerce Cloud2.7 Low
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreunauthorized file access8.7 High
- ibm cognos controllerIBM Cognos Controller information disclosure5.9 Medium
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreImproper data protection on Life2000 ventilator serial interface9.3 Critical
- No product listedCleartext transmission of sensitive information for some BigDL software maintained by Intel(R)...4.3 Medium
- moodleMoodle: authorization headers preserved between "emulated redirects"5.3 Medium
- sbond watcharrA vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform...8.8 High
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive...5.9 Medium
- mongodb mongocryptd, mongo crypt v1.so +1 moreCSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines2.2 Low
- kde kmailispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of...5.9 Medium
- oneidentity safeguard for privileged sessionsAn authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged...5.3 Medium
- viloliving vilo 5 firmware, vilo 5 mesh wifi system firmware +1 moreVilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak...4.3 Medium
- acronis cyber protect 16, cyber protect +1 moreCleartext transmission of sensitive information in acep-collector service. The following products...5.4 Medium
- yescam firmwareAn issue in YESCAM (com.yescom.YesCam.zwave) 1.0.2 allows a remote attacker to obtain sensitive...7.5 High
- red hat ansible automation platform 2Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryption5.3 Medium
- d3d security ip camera d8801, d3dsecurity d8801 +1 moreCredential Leakage Vulnerability8.7 High
- No product listedAn Information Disclosure vulnerability in the Telemetry component in TP-Link Kasa KP125M V1.0.0...4.3 Medium
- ays-pro ai chatbot with chatgpt and content generator by ays, ai chatbot with chatgpt, chatgpt assistant +2 moreAI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key Disclosure7.5 High
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information2.3 Low
- emlog proCleartext Transmission of Sensitive Information in goTenna Pro2.3 Low
- lenovo xclarity administratorA privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that...6.8 Medium
- lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +137 more +139 moreIPMI credentials may be captured in XCC audit log entries when the account username length is 16...4.3 Medium
- ibm concertIBM Concert information disclosure4.3 Medium
- ivanti workspace control, automation +1 moreCleartext transmission of sensitive information in the management console of Ivanti Workspace...8.2 High
- idec ft1a-b12ra firmware, ft1a-b24ra firmware, ft1a-h12ra firmware +93 more +95 moreCleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an...4.6 Medium
- avaiga taipySession Cookie without Secure and HTTPOnly flags in taipy6.3 Medium
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure5.9 Medium
- ibm qradar network packet captureIBM QRadar Network Packet Capture information disclosure5.9 Medium
- gncchome gc2, gncc c2 firmware +1 moreInformation Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with...4.6 Medium
- microsoft .net, .net 8.0, visual studio 2022 version 17.10 +3 more +5 more.NET and Visual Studio Information Disclosure Vulnerability6.5 Medium
- airveda air quality monitor pm2.5 pm10, pm2.5 pm10 monitor firmware +1 moreInformation Disclosure Vulnerability in Airveda Air Quality Monitor8.6 High
- horizoncloud catereaseAn issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly...7.5 High
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVison - HTTPS Session Establishment6.4 Medium
- codenotary immudbmmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText...7.4 High
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreCleartext Transmission of Sensitive Information Vulnerability8.6 High
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...6.5 Medium
- arpsyndicate punciaPuncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`6.3 Medium
- longse technology nvr3608pge2w, zamel zmb-01 +1 moreLongse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device,...6.0 Medium
- canonical ubuntu advantage desktop daemon, ubuntu advantage desktop pro +1 moreMarco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks...5.9 Medium
- jenkins plain credentials, jenkins project plain credentials plugin +1 moreSecret file credentials stored unencrypted in rare cases by Plain Credentials Plugin4.3 Medium
- westermo l210-f2g lynx, l210-f2g firmware, l210-f2g lynx firmware +2 moreWestermo L210-F2G Lynx Cleartext Transmission of Sensitive Information6.9 Medium
- Show moreLoading…