CWE-922: Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains vimThe JetBrains Vim plugin before version 0.52 was storing individual project data in the global...5.3 Medium
- google androidIn KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox...4.4 Medium
- belwith products, llc hickory smartHickory Smart Lock Insecure Storage on iOS6.5 Medium
- belwith products, llc hickory smartHickory Smart Lock Insecure Storage on Android6.5 Medium
- cpanelcPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).5.3 Medium
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services ...7.5 High
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services ...7.5 High
- bluecats reveal, bc reveal +1 moreBlueCats Reveal iOS App Insecure Storage2.8 Low
- bluecats revealBlueCats Reveal Android App Insecure Storage2.8 Low
- eaton halo homeEaton Halo Home Android App Insecure Storage2.8 Low
- suse manager, uyuni +1 moresusemanager installer creates world-readable swap files4.0 Medium
- insteon for hubIn version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the...9.8 Critical
- wink, wink labs inc - smart home +1 moreIn version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used...9.8 Critical
- sandisk secureaccessSanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where...4.3 Medium
- google androidAn information disclosure vulnerability in File-Based Encryption could enable a local malicious...5.5 Medium
- dahuasecurity ip camera firmwareDahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low...8.8 High
- usb pratirodh project pratirodhUSB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such...6.6 Medium