CWE-312

Cleartext Storage of Sensitive Information

Parent: CWE-311 - Missing Encryption of Sensitive Data

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

818 vulnerabilities with CWE-312
CVE-2021-23182 MEDIUM
Gallagher Command Centre <8.40.1888 - Info Disclosure
CVSS 6.0
CVE-2021-32942 MEDIUM
AVEVA InTouch Runtime <2020 R2 - Info Disclosure
CVSS 6.6
CVE-2021-31855 MEDIUM
KDE Messagelib < 5.17.0 - Cleartext Storage of Sensitive Information via Attachment Deletion
CVSS 6.5
CVE-2021-21734 MEDIUM
ZTE ZXA10 F821/F822/F819/F832/F839/F809/F822P - Authenticated Cleartext Storage of Sensitive Information
CVSS 6.5
CVE-2021-29683 MEDIUM
IBM Security Identity Manager 7.0.2 - Authenticated Cleartext Storage of Sensitive Information
CVSS 6.5
CVE-2021-25644 HIGH
Couchbase Server 5.x-6.6.1 and 7.0.0 Beta - Cleartext Storage of Sensitive Information in Log Files
CVSS 7.5
CVE-2021-30183 HIGH
Octopus Server < 2020.5.329 - Cleartext Storage of Sensitive Information in Logs
CVSS 7.5
CVE-2021-20995 MEDIUM
WAGO Managed Switches - Info Disclosure
CVSS 5.3
CVE-2021-25645 MEDIUM
Couchbase Server <6.0.5 6.1.0-6.5.1 6.6.0 - Cleartext Storage of Sensitive Information in Log Files
CVSS 4.4
CVE-2021-22206 MEDIUM
GitLab 11.6.0-13.9.6 - Cleartext Storage of Sensitive Information in Pull Mirror Credentials
CVSS 6.8
CVE-2021-21547 MEDIUM
Dell Unity/UnityVSA/Unity XT < 5.0.7.0.5.008 - Cleartext Sensitive Information Storage
CVSS 6.4
CVE-2021-31791 HIGH
SentrySoftware Hardware Sentry KM for BMC PATROL < 10.0.01 - Cleartext Storage of Sensitive Information
CVSS 7.5
CVE-2021-25898 HIGH
Void Aural Rec Monitor 9.0.0.1 - Cleartext Storage of Sensitive Information in svc-login.php
CVSS 7.5
CVE-2021-31539 MEDIUM
Wowza Streaming Engine < 4.8.8.01 - Cleartext Storage of Sensitive Information in admin.password File
CVSS 5.5
CVE-2021-3473 MEDIUM
Lenovo XClarity Controller - Cleartext Transmission of Sensitive Information in FFDC Service Log
CVSS 4.5
CVE-2021-25692 MEDIUM
Teradici PCoIP Connection Manager and Security Gateway 20.07-20.07.1 - Cleartext Smart Card Data in Logs
CVSS 4.6
CVE-2021-28937 HIGH
Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) - Cleartext Storage of Sensitive Information
CVSS 7.5
CVE-2021-22194 MEDIUM
GitLab - Cleartext Storage of Sensitive Information in Redis
CVSS 5.7
CVE-2021-21339 MEDIUM
TYPO3 < 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 - Cleartext Session Identifiers
CVSS 5.9
CVE-2021-26595 MEDIUM
Directus 8.0.0-8.8.1 - Sensitive Information Exposure via API Endpoint
CVSS 5.3
CVE-2021-23827 MEDIUM
Keybase < 5.6.0 (Windows/macOS) < 5.6.1 (Linux) - Cleartext Storage of Sensitive Media in Cache and Uploadtemps
CVSS 5.5
CVE-2021-27549 MEDIUM
Genymotion Desktop <3.2.0 - Info Disclosure
CVSS 5.3
CVE-2021-27233 MEDIUM
Mutare Voice <3.3.8 - Info Disclosure
CVSS 4.9
CVE-2021-27210 MEDIUM
TP-Link Archer C5v 1.7_181221 - Cleartext Storage of Sensitive Information via USER_CFG Parameter
CVSS 6.5
CVE-2021-20408 MEDIUM
IBM Security Verify Information Queue <1.0.8 - Info Disclosure
CVSS 5.5
Details
Vulnerabilities 818
Links
MITRE CWE Entry Search this CWE With Exploits