CWE-922: Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedAn issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to...6.5 Medium
- No product listedAn issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access...6.5 Medium
- No product listedAn issue in Guangzhou Polar Future Culture Technology Co., Ltd University Search iOS 2.27.0...6.5 Medium
- No product listedAn issue in KuGou Technology CO. LTD KuGou Music iOS v20.0.0 allows attackers to access sensitive...6.5 Medium
- No product listedAn issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access...6.5 Medium
- No product listedIncorrect access control in BYD QIN PLUS DM-i Dilink OS 3.0_13.1.7.2204050.1 allows unauthorized...6.5 Medium
- replicated classicSensitive data unnecessarily returned from authenticated API4.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Kerberos Security Feature Bypass Vulnerability7.1 High
- thecosy icecmsAn access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0...7.5 High
- thecosy icecmsAn access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows...7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +16 more +18 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820,...4.3 Medium
- No product listedSmart Toilet Lab - Motius 1.3.11 is running with debug mode turned on (DEBUG = True) and exposing...7.5 High
- No product listedThe com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme)...9.1 Critical
- No product listedThe com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for...9.1 Critical
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- asseco business solutions s.a. wapro erp desktopProtocol Downgrade in Wapro ERP Desktop9.1 Critical
- No product listedKeyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows...4.3 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18...2.4 Low
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS...5.5 Medium
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- dell data lakehouse, insightiq, powerflex appliance +5 more +7 moreDell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack...8.2 High
- ruijie reyee osRuijie Reyee OS Insecure Storage of Sensitive Information8.7 High
- openatom openharmonyAbility Runtime has an out-of-bounds read permission bypass vulnerability5.5 Medium
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template4.3 Medium
- influxdata influxdbInfluxDB through 2.7.10 allows allAccess administrators to retrieve all raw tokens via an "influx...9.1 Critical
- fortra digital guardian agentUSB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.04.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's OAuth2 client secrets were stored in a recoverable way2.7 Low
- cisco smart software manager on-prem, smart software manager satellite +1 moreCisco Smart Software Manager On-Prem Privilege Escalation Vulnerability4.3 Medium
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreExposure of Sensitive Information in lunary-ai/lunary9.1 Critical
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreExposure of Sensitive Information in lunary-ai/lunary9.1 Critical
- rockwell automation factorytalk updaterFactoryTalk® Updater Authentication Bypass9.1 Critical
- moodleMoodle: admin presets export tool includes some secrets that should not be exported3.7 Low
- paxton-access net2Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023...7.5 High
- No product listedCertain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not...3.5 Low
- No product listedAn issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly...4.6 Medium
- samsung android, samsung mobile devices +1 moreExposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local...4.0 Medium
- everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin, everest backup +1 moreEverest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Log7.5 High
- altaitechnologies ix500 firmwareAltai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads...5.7 Medium
- yealink meeting serverYealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a...7.5 High
- yealink meeting serverYealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server...7.5 High
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An...5.5 Medium
- apple macosAn issue existed in the parsing of URLs. This issue was addressed with improved input validation....5.9 Medium
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and...5.5 Medium
- Show moreLoading…