Vulnerabilities > Cleartext Storage of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2019-09-05 CVE-2019-15947 Cleartext Storage of Sensitive Information vulnerability in Bitcoin Core 0.18.0
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory.
network
low complexity
bitcoin CWE-312
7.5
2019-08-23 CVE-2019-15508 Cleartext Storage of Sensitive Information vulnerability in Octopus Server and Tentacle
In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext.
network
low complexity
octopus CWE-312
6.5
2019-08-23 CVE-2019-15507 Cleartext Storage of Sensitive Information vulnerability in Octopus Server
In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-characters circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext.
network
low complexity
octopus CWE-312
6.5
2019-08-07 CVE-2019-10099 Cleartext Storage of Sensitive Information vulnerability in Apache Spark
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true.
network
low complexity
apache CWE-312
7.5
2019-07-22 CVE-2019-13096 Cleartext Storage of Sensitive Information vulnerability in Tronlink Wallet 2.2.0
TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage.
network
low complexity
tronlink CWE-312
critical
9.8
2019-07-22 CVE-2019-13100 Cleartext Storage of Sensitive Information vulnerability in Send-Anywhere Send Anywhere 9.4.18
The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/shared_prefs/sendanywhere_device.xml.
network
low complexity
send-anywhere CWE-312
6.5
2019-07-22 CVE-2019-13099 Cleartext Storage of Sensitive Information vulnerability in Momo Project Momo 2.1.9
The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat.
network
low complexity
momo-project CWE-312
6.5
2019-07-11 CVE-2019-10351 Cleartext Storage of Sensitive Information vulnerability in Jenkins Caliper CI 2.3
Jenkins Caliper CI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
network
low complexity
jenkins CWE-312
8.8
2019-07-11 CVE-2019-10350 Cleartext Storage of Sensitive Information vulnerability in Jenkins Port Allocator
Jenkins Port Allocator Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
network
low complexity
jenkins CWE-312
8.8
2019-07-11 CVE-2019-10348 Cleartext Storage of Sensitive Information vulnerability in Jenkins Gogs
Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
network
low complexity
jenkins CWE-312
8.8