Vulnerabilities > Cleartext Storage of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2021-10-12 CVE-2021-38915 Cleartext Storage of Sensitive Information vulnerability in IBM Data Risk Manager 2.0.6
IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user.
network
low complexity
ibm CWE-312
6.5
2021-09-23 CVE-2021-29904 Cleartext Storage of Sensitive Information vulnerability in IBM Jazz for Service Management 1.1.3.10
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local user.
local
low complexity
ibm CWE-312
5.5
2021-09-14 CVE-2021-38150 Cleartext Storage of Sensitive Information vulnerability in SAP Business Client 7.0/7.70
When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials.
network
low complexity
sap CWE-312
6.5
2021-09-14 CVE-2021-33716 Cleartext Storage of Sensitive Information vulnerability in Siemens products
A vulnerability has been identified in SIMATIC CP 1543-1 (incl.
low complexity
siemens CWE-312
6.5
2021-09-08 CVE-2020-19137 Cleartext Storage of Sensitive Information vulnerability in Autumn Project Autumn
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10".
network
low complexity
autumn-project CWE-312
7.5
2021-09-08 CVE-2021-1865 Cleartext Storage of Sensitive Information vulnerability in Apple Iphone OS
An issue obscuring passwords in screenshots was addressed with improved logic.
local
low complexity
apple CWE-312
5.0
2021-09-06 CVE-2021-36096 Cleartext Storage of Sensitive Information vulnerability in Otrs
Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden.
network
low complexity
otrs CWE-312
4.9
2021-08-25 CVE-2021-31989 Cleartext Storage of Sensitive Information vulnerability in Axis Device Manager
A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application.
network
high complexity
axis CWE-312
5.3
2021-08-25 CVE-2021-40087 Cleartext Storage of Sensitive Information vulnerability in Primekey Ejbca
An issue was discovered in PrimeKey EJBCA before 7.6.0.
network
low complexity
primekey CWE-312
2.7
2021-08-24 CVE-2021-30997 Cleartext Storage of Sensitive Information vulnerability in Apple Iphone OS
A S/MIME issue existed in the handling of encrypted email.
network
low complexity
apple CWE-312
7.5