CWE-922: Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- alteryx serverInsecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows...8.8 High
- samsung android, samsung mobile devices +1 moreInsecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows...4.0 Medium
- sap se gui for windowsInsecure Key & Secret Management vulnerability in SAP GUI for Windows5.6 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g coreExposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G Core7.7 High
- smarsh telemessage, telemessage service +1 moreThe TeleMessage service through 2025-05-05 implements authentication through a long-lived...4.0 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreSerialization / Deserialization of configuration data5.1 Medium
- rhymixRhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the...7.7 High
- tenda rx2 pro firmwareUse of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to...8.2 High
- schneider electric trio q licensed data radioCWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially...4.1 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Kerberos Security Feature Bypass Vulnerability7.1 High
- samsung wear os, samsung mobile devices +1 moreImproper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to...4.0 Medium
- ntfs tool toolInsecure storage of sensitive information in NTFS Tool6.8 Medium
- red hat multicluster engine for kubernetes, advanced cluster management for kubernetes 2 +1 moreHive: exposure of vcenter credentials via clusterprovision in hive / mce / acm8.2 High
- red hat satellite 6, satellite server +1 moreForeman: disclosure of executed commands and outputs in foreman / red hat satellite3.3 Low
- samsung wear os, samsung mobile devices +1 moreIncorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local...6.2 Medium
- openatom openharmonyLiteos-A has an insecure storage of sensitive information vulnerability5.5 Medium
- eaton foreseer reporting software (frs)Insecure storage of connection strings in FRS6.3 Medium
- smackcoders export all posts, products, orders, refunds & users, export all posts\, products\, orders\, refunds \& users +1 moreExport All Posts, Products, Orders, Refunds & Users <= 2.9.3 - Information Disclosure Through Unprotected Directory7.5 High
- samsung android, samsung mobile devices +1 moreInclusion of sensitive information in test code in softsim TA prior to SMR Jan-2025 Release 1...4.1 Medium
- ruoyiRuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring7.2 High
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple ipados, macos, visionos +3 more +5 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Ventura...5.5 Medium
- apple macosAn information disclosure issue was addressed with improved privacy controls. This issue is fixed...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7.2, macOS...5.5 Medium
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS...5.5 Medium
- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed through improved state management. This issue is fixed in macOS Ventura...5.5 Medium
- apple macosA downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in...5.5 Medium
- xerox workplace suiteToken stored in session storage6.5 Medium
- cmsimpleAn issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a...7.5 High
- No product listedAn issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user...6.5 Medium
- No product listedAn issue in Zhiyuan Yuedu (Guangzhou) Literature Information Technology Co., Ltd Shuqi Novel iOS...6.5 Medium
- No product listedAn issue in Pixocial Technology (Singapore) Pte. Ltd BeautyPlus iOS 7.8.010 allows attackers to...6.5 Medium
- No product listedAn issue in Shenzhen Intellirocks Tech Co. Ltd Govee Home iOS 6.5.01 allows attackers to access...6.5 Medium
- No product listedAn issue in Cloud Whale Interactive Technology LLC. PolyBuzz iOS 2.0.20 allows attackers to...6.5 Medium
- No product listedAn issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS...6.5 Medium
- No product listedAn issue in Shanghai Shizhi Information Technology Co., Ltd Shihuo iOS 8.16.0 allows attackers to...6.5 Medium
- No product listedAn issue in Che Hao Duo Used Automobile Agency (Beijing) Co., Ltd Guazi Used Car iOS 10.15.1...6.5 Medium
- No product listedAn issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers...6.5 Medium
- No product listedAn issue in Tencent Technology (Shanghai) Co., Ltd WeSing iOS v9.3.39 allows attackers to access...6.5 Medium
- No product listedAn issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows...6.5 Medium
- No product listedAn issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access...6.5 Medium
- No product listedAn issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers...6.5 Medium
- No product listedAn issue in Tencent Technology (Shenzhen) Company Limited QQMail iOS 6.6.4 allows attackers to...6.5 Medium
- No product listedAn issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows...6.5 Medium
- No product listedAn issue in Baidu (China) Co Ltd Baidu Input Method (iOS version) v12.6.13 allows attackers to...6.5 Medium
- No product listedAn issue in Beijing Baidu Netcom Science & Technology Co Ltd Baidu Lite app (iOS version) 6.40.0...6.5 Medium
- Show moreLoading…