CWE-312

Cleartext Storage of Sensitive Information

Parent: CWE-311 - Missing Encryption of Sensitive Data

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

804 vulnerabilities with CWE-312
CVE-2023-22332 MEDIUM
Pgpool-II 3.3.0-3.7.11 - Cleartext Storage of Sensitive Information
CVSS 6.5
CVE-2023-24454 MEDIUM
Jenkins TestQuality Updater Plugin <1.3 - Info Disclosure
CVSS 5.5
CVE-2023-24450 MEDIUM
Jenkins view-cloner Plugin <1.1 - Info Disclosure
CVSS 6.5
CVE-2023-24442 MEDIUM
Jenkins GitHub Pull Request Coverage Status Plugin <2.2.0 - Info Di...
CVSS 5.5
CVE-2023-24439 MEDIUM
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - Info Di...
CVSS 5.5
CVE-2023-24055 MEDIUM
KeePass < 2.53 - Cleartext Password Exposure via Export Trigger
CVSS 5.5
CVE-2022-46141 MEDIUM
SIMATIC STEP 7 (TIA Portal) < V19 - Info Disclosure
CVSS 4.2
CVE-2022-22302 MEDIUM
FortiGate/FortiAuthenticator <6.4.1/6.2.9/<6.0.13 - Info Disclosure
CVSS 5.3
CVE-2022-33159 MEDIUM
IBM Security Directory Suite VA <8.0.1.19 - Info Disclosure
CVSS 5.3
CVE-2022-48310 MEDIUM
Sophos Connect < 2.2.90 - Sensitive Key Material Exposure in Technical Support Archives
CVSS 5.5
CVE-2022-34910 MEDIUM
aremis_4_nomads < 1.5.1 - Cleartext Storage of Sensitive Information
CVSS 4.1
CVE-2022-31405 MEDIUM
MV iDigital Clinic Enterprise (iDCE) 1.0 - Info Disclosure
CVSS 6.5
CVE-2022-34351 MEDIUM
IBM QRadar SIEM 7.4-7.5 - Unauthorized Information Exposure via Domain Security Profile
CVSS 5.9
CVE-2022-41734 MEDIUM
IBM Maximo Asset Management <7.6.1.3 - Info Disclosure
CVSS 5.3
CVE-2022-45154 MEDIUM
supportutils < 3.0.10-95.51.1 - Cleartext Storage of Sensitive Information in Support Logs
CVSS 4.4
CVE-2022-3089 MEDIUM
Echelon SmartServer 2.2 - Info Disclosure
CVSS 6.3
CVE-2022-34388 HIGH
Dell SupportAssist < 3.11.4 (Home) / < 3.2.0 (Business) - Cleartext Sensitive Data Storage
CVSS 7.1
CVE-2022-24410 MEDIUM
Dell Alienware BIOS < 1.15.1 - Unauthenticated Sensitive Information Exposure via Debug Interfaces
CVSS 6.8
CVE-2022-43757 CRITICAL
SUSE Rancher <2.5.17, <2.6.10, <2.7.1 - Info Disclosure
CVSS 9.9
CVE-2022-45098 MEDIUM
Dell PowerScale OneFS 9.1.0.0-9.1.0.25 - Authenticated Sensitive Information Disclosure in S3 Component
CVSS 6.1
CVE-2022-45897 MEDIUM
Xerox WorkCentre 3550 25.003.03.000 - Authenticated Cleartext Storage of Sensitive Information in SMB Server Settings
CVSS 6.5
CVE-2022-48073 HIGH
Phicomm K2G v22.6.3.20 - Cleartext Storage of Sensitive Information
CVSS 7.5
CVE-2022-48071 HIGH
Phicomm K2 v22.6.534.263 - Cleartext Storage of Sensitive Information
CVSS 7.5
CVE-2022-38112 HIGH
SolarWinds Database Performance Analyzer < 2022.4 - Cleartext Storage of Sensitive Information in Heap Memory Dumps
CVSS 7.5
CVE-2022-45439 MEDIUM
Zyxel AX7501-B0 Firmware < 5.17(ABPC.3)C0 - Cleartext Storage of Sensitive WiFi Credentials
CVSS 6.5
Details
Vulnerabilities 804