CWE-319

High likelihood

Cleartext Transmission of Sensitive Information

Parent: CWE-311 - Missing Encryption of Sensitive Data

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

884 vulnerabilities with CWE-319
CVE-2008-3289 HIGH
EMC Dantz Retrospect Backup Client <7.5.116 - Info Disclosure
CVSS 7.5
CVE-2008-0374 HIGH
OKI C5510MFP Firmware - Cleartext Transmission of Sensitive Information via TCP Port 5548 or 7777
CVSS 7.5
CVE-2007-5626 MEDIUM
Bacula < 2.2.5 - Cleartext Transmission of Sensitive Information via MySQL Password Command Line Argument
CVSS 5.5
CVE-2007-4786 MEDIUM
Cisco ASA 7.0-7.0.7.1, 7.1-7.1.2.61, 7.2-7.2.2.34, 8.0-8.0.2.11 Cleartext Sensitive Info via AAA Test Command
CVSS 5.3
CVE-2005-3140 HIGH
Procom NetFORCE 800 <4.02 M10 Build 20 - Info Disclosure
CVSS 7.5
CVE-2005-2069
padl nss_ldap and pam_ldap - Cleartext Transmission of Sensitive Information via LDAP Referral
CVE-2004-1852
DameWare Mini Remote Control 3.0-3.73 and 4.0-4.1 - Cleartext Transmission of Blowfish Encryption Key
CVE-2003-5002 LOW
ISS BlackICE PC Protection - Cleartext Transmission of Sensitive Information in Update Handler
CVSS 3.7
CVE-2002-1949 HIGH
Iomega NAS A300U Firmware - Cleartext Transmission of Sensitive Information
CVSS 7.5
Details
Vulnerabilities 884
Exploit Likelihood High