CWE-319
High likelihoodCleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
882 vulnerabilities with CWE-319
CVE-2023-30841
MEDIUM
Baremetal Operator < 0.3.0 - Cleartext Transmission of Sensitive Information via ConfigMap Storage
CVSS 6.0
CVE-2023-1831
HIGH
Mattermost < 7.7.3 - Sensitive Information Exposure in Audit Logs
CVSS 7.2
CVE-2023-30515
HIGH
Jenkins Thycotic DevOps Secrets Vault Plugin < 1.0.0 - Cleartext Transmission of Sensitive Information in Build Log
CVSS 7.5
CVE-2023-30514
HIGH
Jenkins Azure Key Vault Plugin < 187.va_cd5fecd198a - Credential Exposure in Build Log
CVSS 7.5
CVE-2023-30513
HIGH
Jenkins Kubernetes Plugin < 3909.v1f2c633e8590 - Cleartext Transmission of Sensitive Information in Build Log
CVSS 7.5
CVE-2023-1802
MEDIUM
Docker Desktop 4.17.x - Info Disclosure
CVSS 5.9
CVE-2023-0922
MEDIUM
Samba >=4.0.0 <4.16.10 - Cleartext Transmission of Sensitive Information via LDAP Password Operations
CVSS 5.9
CVE-2023-1656
HIGH
ForgeRock Inc. OpenIDM <1.5.20.13 - Info Disclosure
CVSS 7.5
CVE-2023-27927
MEDIUM
sauter-controls ey-as525f001_firmware - Authenticated Cleartext Transmission of SMTP Password
CVSS 6.5
CVE-2023-0053
HIGH
SAUTER Controls Nova 200-220 - Info Disclosure
CVSS 7.5
CVE-2023-23915
MEDIUM
curl 7.77.0-7.87.0 - Cleartext Transmission of Sensitive Information via HSTS Cache Overwrite
CVSS 6.5
CVE-2023-23914
CRITICAL
curl < 7.88.0 - Cleartext Transmission of Sensitive Information via HSTS State Mismanagement
CVSS 9.1
CVE-2023-22806
HIGH
LS ELECTRIC XBC-DN32U 01.80 - Cleartext Transmission of Sensitive Information via XGT Protocol
CVSS 7.5
CVE-2023-0001
MEDIUM
Palo Alto Networks Cortex XDR < - Info Disclosure
CVSS 6.0
CVE-2023-25016
HIGH
Couchbase Server < 6.6.6, 7.x < 7.0.5, 7.1.x < 7.1.2 - Cleartext Transmission of Sensitive Information
CVSS 7.5
CVE-2023-23130
MEDIUM
Connectwise Automate 2022.11 - Cleartext Transmission of Sensitive Information
CVSS 5.9
CVE-2023-24440
MEDIUM
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - Info Di...
CVSS 5.5
CVE-2023-22863
MEDIUM
IBM Robotic Process Automation 20.12.0-21.0.2 - Cleartext Transmission of Sensitive Information via Default HTTP
CVSS 5.9
CVE-2023-22597
MEDIUM
InRouter 302 < 3.5.56 & InRouter 615 < 2.3.0.r5542 - Cleartext Sensitive Data via Cloud
CVSS 6.5
CVE-2023-0055
MEDIUM
pyload <0.5.0b3.dev32 - Info Disclosure
CVSS 5.3
CVE-2022-41545
MEDIUM
Netgear C7800 Router <6.01.07 - Info Disclosure
CVSS 6.4
CVE-2022-32510
HIGH
Nuki Home Solutions - Unencrypted Channel
CVSS 7.1
CVE-2022-22385
MEDIUM
IBM Security Verify Privilege On-Premises <11.5 - Info Disclosure
CVSS 5.9
CVE-2022-47892
MEDIUM
NetMan 204 Firmware - Unauthenticated Sensitive Information Exposure via config.cgi
CVSS 5.3
CVE-2022-47560
MEDIUM
Ormazabal ekorRCI and ekorCCP Firmware - Cleartext Transmission of Sensitive Information
CVSS 5.7
Details
Vulnerabilities
882
Exploit Likelihood
High