CWE-921: Storage of Sensitive Data in a Mechanism without Access Control
The product stores sensitive information in a file system or device that does not have built-in access control.
A kind of CWE-922 Insecure Storage of Sensitive Information.
From the CWE List. © The MITRE Corporation.
Newest
- sap se financial consolidation Authentication Bypass Vulnerability in SAP Financial Consolidation 9.8 Critical
- dario health application database and internet-based server infrastructure, usb-c blood glucose monitoring system starter kit android applications +1 more Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control 5.1 Medium
- e-kent pallium vehicle tracking Information Disclosure in E-Kent's Pallium Vehicle Tracking 8.2 High
- sap se gui for windows Insecure Key & Secret Management vulnerability in SAP GUI for Windows 6.0 Medium
- scikit-learn, scikit-learn scikit-learn/scikit-learn +1 more Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn 4.7 Medium
- motorola phones An improper use of the SD card for sensitive data vulnerability was reported in the Motorola... 5.0 Medium
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 more Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information 7.5 High
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis 7.5 High
- redhat ignition, fedoraproject fedora, redhat enterprise linux +1 more +3 more Ignition config accessible to unprivileged software on VMware 6.5 Medium
- philips gemini 16 slice, gemini dual, gemini gxl 10 slice +19 more +21 more Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control 2.4 Low