CWE-312

Cleartext Storage of Sensitive Information

Parent: CWE-311 - Missing Encryption of Sensitive Data

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

804 vulnerabilities with CWE-312
CVE-2024-35117 MEDIUM
IBM OpenPages with Watson 9.0 - Cleartext Storage of Sensitive Information in System Tracing Log Files
CVSS 4.4
CVE-2024-46340 CRITICAL
TP-Link TL-WR845N(UN)_V4 - Cleartext Storage of Sensitive Information
CVSS 9.8
CVE-2024-40582 HIGH
Pentaminds CuroVMS v2.0.1 - Info Disclosure
CVSS 7.5
CVE-2024-55582 MEDIUM
Oxide < 6 - Cleartext Storage of Sensitive Information in Control Plane Datastores
CVSS 5.7
CVE-2024-54127 MEDIUM
TP-Link Archer C50 - Info Disclosure
CVE-2024-12094 MEDIUM
Tinxy Android app < 663000 and iOS app < 6.7.0 - Cleartext Storage of Sensitive Information in Device Database
CVE-2024-42451 MEDIUM
Veeam Backup & Replication - Info Disclosure
CVSS 6.5
CVE-2024-53979 HIGH
zhmc-ansible-modules < 1.9.3 - Cleartext Storage of Sensitive Information in Log Files
CVSS 8.2
CVE-2024-53865 HIGH
zhmcclient < 1.18.1 - Cleartext Storage of Sensitive Information in Logs
CVSS 8.2
CVE-2024-29146 MEDIUM
Product with vulnerability - Info Disclosure
CVSS 5.9
CVE-2024-46383 LOW
Hathway Skyworth Router CM5100-511 v4.1.1.24 - Info Disclosure
CVSS 2.4
CVE-2024-52525 LOW
Nextcloud Server 28.0.0-28.0.11 - Cleartext Storage of Sensitive Information in Session Data
CVSS 1.8
CVE-2024-11159 MEDIUM
Thunderbird < 128.4.3 - Cleartext Storage of Sensitive Information via OpenPGP Encrypted Messages
CVSS 4.3
CVE-2024-43429 MEDIUM
Moodle < 4.1.12 and 4.4.0-4.4.2 - Unprotected User Data Exposure via Gradebook Reports
CVSS 5.3
CVE-2024-51993 LOW
Combodo iTop <3.2.0 - Info Disclosure
CVSS 3.4
CVE-2024-34891 MEDIUM
Bitrix24 23.300.100 - Cleartext Storage of Sensitive Information in DAV Server Settings
CVSS 6.8
CVE-2024-10523 MEDIUM
TP-Link Tapo H100 Firmware < 1.5.22 - Cleartext Storage of Wi-Fi Credentials
CVSS 4.6
CVE-2024-7783 HIGH
AnythingLLM < 1.2.1 - Cleartext Storage of Sensitive Information in JWT Bearer Token
CVSS 7.5
CVE-2024-9991 HIGH
Philips lighting devices - Info Disclosure
CVE-2024-8070 HIGH
Firmware <version> - Info Disclosure
CVSS 8.5
CVE-2024-9802 MEDIUM
Zowe API Mediation Layer 2.11.0-2.16.9 - Information Exposure via Conformance Validation Endpoint
CVSS 5.3
CVE-2024-9798 CRITICAL
Zowe API Mediation Layer 1.0.0-1.28.7 - Unauthenticated Sensitive Information Exposure via Health Endpoint
CVSS 9.0
CVE-2024-9466 MEDIUM
Palo Alto Networks Expedition 1.2.0-1.2.95 - Authenticated Sensitive Information Disclosure in Log Files
CVSS 6.5
CVE-2024-6400 HIGH
Finrota Netahsilat <1.24.03 - Info Disclosure
CVSS 7.5
CVE-2024-47529 MEDIUM
OpenC3 COSMOS < 5.19.0 - Cleartext Storage of Sensitive Information in LocalStorage
CVSS 6.5
Details
Vulnerabilities 804
Links
MITRE CWE Entry Search this CWE With Exploits