CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- ataturk university ata-aof mobile applicationHardcoded Credentials in Ataturk University's ATA-AOF Mobile Application10.0 Critical
- yftech coros pace 3 firmwareAn issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to...9.8 Critical
- vishalmathur cloudclassroom-php projectAn issue in CloudClassroom PHP Project v.1.0 allows a remote attacker to execute arbitrary code...9.8 Critical
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Interception in Endpoint Traffic Policy Enforcement1.0 Low
- sick media serverUnencrypted communication7.5 High
- sick media serverUnencrypted communication (HTTP)7.5 High
- tinxy wifi lock controller v1 rf firmwareTinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext,...5.9 Medium
- mozilla firefox, thunderbird +1 moreSNI was sometimes unencrypted7.5 High
- meddream web dicom viewer, pacs server +1 moreMedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability5.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices5.3 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with...6.7 Medium
- pixmeo osirix mdPixmeo OsiriX MD Cleartext Transmission of Sensitive Information9.3 Critical
- arista networks cloudvision portalOn affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.9.1 Critical
- crestron automate vxNon-Secure Access10.0 Critical
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command...7.1 High
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a...4.3 Medium
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the...4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure3.7 Low
- meon kyc solutionsInformation Disclosure Vulnerability in Meon KYC solutions8.7 High
- ciliumCilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters4.0 Medium
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication...6.9 Medium
- veritas data insightArctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use...4.7 Medium
- inaba denki sangyo co., ltd. ac-wps-11ac, ac-pd-wps-11ac, ac-pd-wps-11ac-p +3 more +5 moreCleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series...5.9 Medium
- sap se commerce cloud (public cloud)Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)6.8 Medium
- consumer comanda mobileConsumer Comanda Mobile Restaurant Order cleartext transmission2.3 Low
- arteche satech bcu, satech bcu firmware +1 moreCleartext Transmission of Sensitive Information vulnerability in saTECH BCU6.9 Medium
- xiaomi mi connect serviceMi Connect Service APP protocol flaws lead to leaking sensitive user information6.5 Medium
- sechard information technologies sechardAuthentication Bypass in Sechard Information Technologies' SecHard9.0 Critical
- phpipam, phpipam phpipam/phpipam +1 moreCookie without Secure attribute in phpipam/phpipam5.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed by using HTTPS when sending information over the network. This issue is...7.3 High
- sick ag dl100-2xxxxxxxUnencrypted transmission of password hash7.5 High
- bitdefender box v1, box firmware +1 moreBitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so9.4 Critical
- eaton foreseer reporting software (frs)Improper cookie attributes in Foreseer Reporting Software (FRS)5.6 Medium
- dario health application database and internet-based server infrastructure, usb-c blood glucose monitoring system starter kit android applications +1 moreDario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information7.5 High
- No product listedBosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were...6.5 Medium
- netgear c7800 firmwareThe administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and...6.4 Medium
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS may capture SNMP Passwords in clear text5.3 Medium
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result...8.7 High
- progress telerik report serverTelerik Report Server Clear Text Transmission of Agent Commands8.8 High
- No product listedForever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h suffers from...7.5 High
- ibm security verify access appliance, security verify access, security verify access container +1 more +3 moreIBM Security Verify Access information disclosure5.9 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreSensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM)6.6 Medium
- ibm security verify governanceIBM Security Verify Governance information5.9 Medium
- intelbras incontrol, incontrol web +1 moreIntelbras InControl Registered User usuario cleartext transmission6.3 Medium
- rockwell automation powerflex 755PowerFlex® 755 Credential Exposure Vulnerability8.7 High
- hms networks ewon flexy 202HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information6.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure6.5 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- etic telecom remote access server (ras), etictelecom remote access server firmware +1 moreETIC Telecom Remote Access Server (RAS) Cleartext Transmission of Sensitive Information6.1 Medium
- No product listedThe HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over...6.5 Medium
- Show moreLoading…