Vulnerabilities > Cleartext Storage of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2023-01-13 CVE-2022-42284 Cleartext Storage of Sensitive Information vulnerability in Nvidia BMC
NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host.
local
low complexity
nvidia CWE-312
5.5
2023-01-09 CVE-2022-22470 Cleartext Storage of Sensitive Information vulnerability in IBM Security Verify Governance 10.0
IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user.
local
low complexity
ibm CWE-312
5.5
2023-01-05 CVE-2022-41740 Cleartext Storage of Sensitive Information vulnerability in IBM products
IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from system memory.
low complexity
ibm CWE-312
4.6
2023-01-01 CVE-2022-37785 Cleartext Storage of Sensitive Information vulnerability in Wecube-Platform Project Wecube-Platform 3.2.2
An issue was discovered in WeCube Platform 3.2.2.
network
low complexity
wecube-platform-project CWE-312
7.5
2022-12-26 CVE-2022-24120 Cleartext Storage of Sensitive Information vulnerability in GE products
Certain General Electric Renewable Energy products store cleartext credentials in flash memory.
low complexity
ge CWE-312
4.6
2022-12-22 CVE-2022-22457 Cleartext Storage of Sensitive Information vulnerability in IBM Security Verify Governance 10.0.1
IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user.
local
low complexity
ibm CWE-312
4.4
2022-12-22 CVE-2022-42931 Cleartext Storage of Sensitive Information vulnerability in Mozilla Firefox
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk.
local
low complexity
mozilla CWE-312
3.3
2022-12-19 CVE-2022-47512 Cleartext Storage of Sensitive Information vulnerability in Solarwinds Platform 2022.4.0
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability (HCO)/ SolarWinds Platform 2022.4.
local
low complexity
solarwinds CWE-312
5.5
2022-12-13 CVE-2022-31697 Cleartext Storage of Sensitive Information vulnerability in VMWare Vcenter Server 6.5/6.7/7.0
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext.
local
low complexity
vmware CWE-312
5.5
2022-12-01 CVE-2022-35120 Cleartext Storage of Sensitive Information vulnerability in Ixpdata Easyinstall 6.6.14725
IXPdata EasyInstall 6.6.14725 contains an access control issue.
local
low complexity
ixpdata CWE-312
8.8