CWE-312
AllowedCleartext Storage of Sensitive Information
Abstraction: Base · Status: Draft
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
1094 vulnerabilities reference this CWE, most recent first.
GHSA-VHV6-87PM-667V
Vulnerability from github – Published: 2022-05-24 17:37 – Updated: 2022-05-24 17:37A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 build 20201015 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.2.1379 build 20200730 (and later)
{
"affected": [],
"aliases": [
"CVE-2018-19941"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2020-12-31T17:15:00Z",
"severity": "HIGH"
},
"details": "A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 build 20201015 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.2.1379 build 20200730 (and later)",
"id": "GHSA-vhv6-87pm-667v",
"modified": "2022-05-24T17:37:33Z",
"published": "2022-05-24T17:37:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19941"
},
{
"type": "WEB",
"url": "https://www.qnap.com/zh-tw/security-advisory/qsa-20-23"
}
],
"schema_version": "1.4.0",
"severity": []
}
GHSA-VHW2-M627-4R89
Vulnerability from github – Published: 2022-05-24 17:41 – Updated: 2022-05-24 17:41IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965.
{
"affected": [],
"aliases": [
"CVE-2021-20358"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-02-08T15:15:00Z",
"severity": "MODERATE"
},
"details": "IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965.",
"id": "GHSA-vhw2-m627-4r89",
"modified": "2022-05-24T17:41:17Z",
"published": "2022-05-24T17:41:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20358"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/194965"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/6412345"
}
],
"schema_version": "1.4.0",
"severity": []
}
GHSA-VHX7-JPM9-345W
Vulnerability from github – Published: 2022-05-13 01:43 – Updated: 2022-05-13 01:43WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access (such as access gained through an unspecified SQL injection vulnerability).
{
"affected": [],
"aliases": [
"CVE-2017-14990"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2017-10-03T01:29:00Z",
"severity": "MODERATE"
},
"details": "WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access (such as access gained through an unspecified SQL injection vulnerability).",
"id": "GHSA-vhx7-jpm9-345w",
"modified": "2022-05-13T01:43:36Z",
"published": "2022-05-13T01:43:36Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14990"
},
{
"type": "WEB",
"url": "https://core.trac.wordpress.org/ticket/38474"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2017/dsa-3997"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1039554"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-VJ9Q-GW7F-J56J
Vulnerability from github – Published: 2025-07-16 12:30 – Updated: 2025-07-16 12:30This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the hardcoded default credentials stored in the firmware of the targeted device.
Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted device.
{
"affected": [],
"aliases": [
"CVE-2025-53758"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-07-16T12:15:30Z",
"severity": "MODERATE"
},
"details": "This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the hardcoded default credentials stored in the firmware of the targeted device.\n\nSuccessful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted device.",
"id": "GHSA-vj9q-gw7f-j56j",
"modified": "2025-07-16T12:30:27Z",
"published": "2025-07-16T12:30:27Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53758"
},
{
"type": "WEB",
"url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01\u0026VLCODE=CIVN-2025-0147"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-VM59-55F6-4QP9
Vulnerability from github – Published: 2024-02-05 18:31 – Updated: 2024-02-05 18:31Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
{
"affected": [],
"aliases": [
"CVE-2023-6874"
],
"database_specific": {
"cwe_ids": [
"CWE-312",
"CWE-754"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-05T18:15:51Z",
"severity": "HIGH"
},
"details": "Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number",
"id": "GHSA-vm59-55f6-4qp9",
"modified": "2024-02-05T18:31:37Z",
"published": "2024-02-05T18:31:37Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6874"
},
{
"type": "WEB",
"url": "https://community.silabs.com/069Vm000000WXaOIAW"
},
{
"type": "WEB",
"url": "https://github.com/SiliconLabs/gecko_sdk"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-VM7Q-FG8C-G6VG
Vulnerability from github – Published: 2022-11-07 19:00 – Updated: 2022-11-08 19:00The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.
{
"affected": [],
"aliases": [
"CVE-2022-42955"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-11-07T13:15:00Z",
"severity": "HIGH"
},
"details": "The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.",
"id": "GHSA-vm7q-fg8c-g6vg",
"modified": "2022-11-08T19:00:23Z",
"published": "2022-11-07T19:00:22Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42955"
},
{
"type": "WEB",
"url": "https://chrome.google.com/webstore/detail/passwork-self-hosted/ibiipnmmlnehmeonnhbdajcfagcgihkl"
},
{
"type": "WEB",
"url": "https://passwork.canny.io/changelog/version-5110"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-VMPM-J7PR-PXXH
Vulnerability from github – Published: 2022-03-17 00:00 – Updated: 2022-03-29 00:01SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials.
{
"affected": [],
"aliases": [
"CVE-2022-23234"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-03-16T15:15:00Z",
"severity": "MODERATE"
},
"details": "SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials.",
"id": "GHSA-vmpm-j7pr-pxxh",
"modified": "2022-03-29T00:01:39Z",
"published": "2022-03-17T00:00:24Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23234"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20220228-0001"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GHSA-VPP2-J4X9-VP5C
Vulnerability from github – Published: 2022-05-24 16:50 – Updated: 2024-04-04 01:19TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/.xml to gain unauthorized access.
{
"affected": [],
"aliases": [
"CVE-2019-13096"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-07-22T17:15:00Z",
"severity": "CRITICAL"
},
"details": "TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/\u003cwallet-name\u003e.xml to gain unauthorized access.",
"id": "GHSA-vpp2-j4x9-vp5c",
"modified": "2024-04-04T01:19:54Z",
"published": "2022-05-24T16:50:51Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13096"
},
{
"type": "WEB",
"url": "https://pastebin.com/raw/08REmV1X"
},
{
"type": "WEB",
"url": "https://pastebin.com/raw/J9B8Lh0j"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-VQF9-X5CX-JWW3
Vulnerability from github – Published: 2022-05-13 01:32 – Updated: 2022-05-13 01:32IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713.
{
"affected": [],
"aliases": [
"CVE-2018-1877"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-11-02T15:29:00Z",
"severity": "HIGH"
},
"details": "IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713.",
"id": "GHSA-vqf9-x5cx-jww3",
"modified": "2022-05-13T01:32:33Z",
"published": "2022-05-13T01:32:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1877"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/151713"
},
{
"type": "WEB",
"url": "http://www.ibm.com/support/docview.wss?uid=ibm10735973"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-VRFC-3WHC-J2HQ
Vulnerability from github – Published: 2022-05-01 18:36 – Updated: 2025-04-09 03:47Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network.
{
"affected": [],
"aliases": [
"CVE-2007-5778"
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2007-11-01T16:46:00Z",
"severity": "MODERATE"
},
"details": "Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network.",
"id": "GHSA-vrfc-3whc-j2hq",
"modified": "2025-04-09T03:47:59Z",
"published": "2022-05-01T18:36:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5778"
},
{
"type": "WEB",
"url": "http://osvdb.org/43625"
},
{
"type": "WEB",
"url": "http://osvdb.org/43626"
},
{
"type": "WEB",
"url": "http://securityreason.com/securityalert/3333"
},
{
"type": "WEB",
"url": "http://www.airscanner.com/security/07101401_mobilespy.htm"
},
{
"type": "WEB",
"url": "http://www.informit.com/articles/article.aspx?p=1077909"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/482663/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/26177"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
Mitigation
When storing data in the cloud (e.g., S3 buckets, Azure blobs, Google Cloud Storage, etc.), use the provider's controls to encrypt the data at rest. [REF-1297] [REF-1299] [REF-1301]
Mitigation
In some systems/environments such as cloud, the use of "double encryption" (at both the software and hardware layer) might be required, and the developer might be solely responsible for both layers, instead of shared responsibility with the administrator of the broader system/environment.
CAPEC-37: Retrieve Embedded Sensitive Data
An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.