CWE-922: Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- tp-link tapo c200 firmware, tapo c200 v3 firmware, tapo tc70 firmware +2 moreInsecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and...4.6 Medium
- hcl software bigfix osd bare metal server webui, hcltechsw bigfix bare osd metal server webui +1 moreHCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure2.3 Low
- geniecompany aladdin connect, the genie company aladdin connect mobile application +1 moreAladdin Connect Android Application Insecure Storage6.8 Medium
- hihonor vmall, honor com.hihonor.vmall +1 moreSome Honor products are affected by information leak vulnerability, successful exploitation...3.3 Low
- ibm i access client solutionsIBM i Access Client Solutions information disclosure7.4 High
- ibm i access client solutionsIBM i Access Client Solutions6.2 Medium
- google nodejs-firestore, cloud firestore +1 moreInformation leak in nodejs-firestore4.0 Medium
- fortra digital guardian agentSaved Uninstall Key in Digital Guardian Agent Uninstaller6.0 Medium
- samsung open source oneA vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the...4.3 Medium
- vmware vcenter server, cloud foundation (vmware vcenter server) +1 moreVMware vCenter Server Partial Information Disclosure Vulnerability4.3 Medium
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreSSH as Root Unlockable Without Triggering Measured Boot8.8 High
- lf-edge, zededa eve os, lfedge eve +1 moreDebug Functions Unlockable Without Triggering Measured Boot8.8 High
- lf-edge, zededa eve os, lfedge eve +1 moreConfig Partition Not Protected by Measured Boot8.8 High
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreConfig Partition Not Measured From 2 Fronts8.8 High
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Insecure Storage of Sensitive Information7.5 High
- siemens qms automotiveA vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile...7.3 High
- wftpserver wing ftp server, wing ftp server ftp server +1 moreExposed Session Variable in Wing FTP Server <= 7.2.06.5 Medium
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling Secure Proxy information disclosure5.1 Medium
- arubanetworks edgeconnect sd-wan orchestratorReflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface6.1 Medium
- opensuse opensuse-welcome, welcome +1 moreA Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows...7.8 High
- ngsurveyInformation disclosure in password protected surveys in Data Illusion Survey Software Solutions...7.5 High
- progress chef infra serverProgress Chef Infra Server before 15.7 allows a local attacker to exploit a /var/opt/opscode...5.5 Medium
- elecom co.,ltd. wrc-1167febk-a, wrc-1167febk-s, wrc-1167gebk-s +14 more +16 moreExposure of sensitive information to an unauthorized actor issue exists in ELECOM wireless LAN...6.5 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is vulnerable to sensitive information disclosure5.1 Medium
- apple ipados, macos, tvos +2 more +4 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreDefault permissions for a properties file were too permissive. Local system users could read...3.2 Low
- leap blue light filterAn issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause...7.8 High
- urbanandroid twilightAn issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of...7.8 High
- mobatime mobile application amxgt100, amxgt 100 +1 moreMobatime mobile application - Sensitive information disclosure7.5 High
- applika call blockerThe Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed...9.8 Critical
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreStorage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis7.5 High
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreStoring Passwords in a Recoverable Format8.0 High
- intel data center managerInsecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may...6.0 Medium
- intel data center managerInsecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may...8.2 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS...5.5 Medium
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- ibm urbancode deployIBM UrbanCode Deploy (UCD) information disclosure5.1 Medium
- jose mortellaro freesoul deactivate plugins – plugin manager and cleanup, freesoul deactivate plugins - plugin manager and cleanup project deactivate plugins - plugin manager and cleanup +1 moreWordPress Freesoul Deactivate Plugins – Plugin manager and cleanup Plugin <= 1.9.4.0 is vulnerable to Sensitive Data Exposure3.7 Low
- abb my control system (on-premise), my control system +1 moreInformation Disclosure vulnerability in My Control System (on-premise)5.4 Medium
- juiker, juiker app +1 moreJuiker app - Information Leakage2.4 Low
- apple macosA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...5.5 Medium
- intel celeron j1750 firmware, celeron j1800 firmware, celeron j1850 firmware +224 more +226 moreImproper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software...6.0 Medium
- kitesky kitecmsIncorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view...7.5 High
- publify publify/publify, publify project publify +1 moreInsecure Storage of Sensitive Information in publify/publify4.6 Medium
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck card vulnerable to data leak to unauthorized users via reference preview cache5.8 Medium
- apple ios, iphone os, macos +1 more +3 moreAn issue existed with the file paths used to store website data. The issue was resolved by...5.3 Medium
- ibm partner engagement managerIBM Sterling Partner Engagement Manager information disclosure4.0 Medium
- ibm cics txIBM CICS TX information disclosure4.0 Medium
- intel wlan authentication and privacy infrastructureImproper access control in the Intel(R) WAPI Security software for Windows 10/11 before version...3.3 Low
- Show moreLoading…