CWE-312 - Cleartext Storage of Sensitive Information

Description

As sensitive information is stored in cleartext, it is not protected from malicious users' access. Even data made human-unreadable can be easily decoded by attacker having access to the system with the help of certain techiques.
The weakness is introduces during Architecture and Design stage.

Latest vulnerabilities for CWE-312

Cleartext storage of sensitive information in Bosch Configuration Manager 2024-10-02
Low Yes

IBM Cloud Pak for Data update for RubyGems activesupport 2024-10-01
Low Yes

Multiple vulnerabilities in Kastle Systems Access Control System 2024-09-23
High Yes

Multiple vulnerabilities in Apple iOS 18 and iPadOS 18 2024-09-17
High Yes

Multiple vulnerabilities in macOS Sequoia 2024-09-17
High Yes

Cleartext storage of sensitive information in Palo Alto Networks ActiveMQ Content Pack 2024-09-16
Medium Yes

Multiple vulnerabilities in IBM Process Mining 2024-09-13
High Yes

Multiple vulnerabilities in IBM Cloud Pak for Business Automation 2024-09-13
High Yes

Multiple vulnerabilities in Cisco Routed Passive Optical Network (PON) Controller Software 2024-09-13
Low Yes

Multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) 2024-09-12
Medium Yes

References

Description of CWE-312 on Mitre website