CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.