Vulnerabilities > Cleartext Storage of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2019-04-08 CVE-2018-1882 Cleartext Storage of Sensitive Information vulnerability in IBM products
In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file.
local
ibm CWE-312
1.9
2019-04-04 CVE-2018-19981 Cleartext Storage of Sensitive Information vulnerability in Amazon AWS Software Development KIT
Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service.
network
low complexity
amazon CWE-312
critical
9.0
2019-03-26 CVE-2019-3606 Cleartext Storage of Sensitive Information vulnerability in Mcafee Network Security Manager
Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.
local
high complexity
mcafee CWE-312
4.1
2019-03-21 CVE-2018-17489 Cleartext Storage of Sensitive Information vulnerability in Hidglobal Easylobby Solo 11.0.4563
EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext.
local
low complexity
hidglobal CWE-312
2.1
2019-03-21 CVE-2018-12572 Cleartext Storage of Sensitive Information vulnerability in Avast Free Antivirus
Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.
local
low complexity
avast CWE-312
2.1
2019-02-19 CVE-2019-5765 Cleartext Storage of Sensitive Information vulnerability in multiple products
An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.
local
low complexity
google redhat debian fedoraproject CWE-312
5.5
2018-12-04 CVE-2018-18641 Cleartext Storage of Sensitive Information vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3.
network
low complexity
gitlab CWE-312
5.0
2018-11-28 CVE-2018-5559 Cleartext Storage of Sensitive Information vulnerability in Rapid7 Komand
In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connection data could return some configurations of connection data without obscuring sensitive data from the API response sent over an encrypted channel.
network
low complexity
rapid7 CWE-312
4.0
2018-11-14 CVE-2018-19279 Cleartext Storage of Sensitive Information vulnerability in Primx Zonecentral
PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files.
local
low complexity
primx microsoft CWE-312
2.1
2018-11-02 CVE-2018-1877 Cleartext Storage of Sensitive Information vulnerability in IBM Robotic Process Automation With Automation Anywhere 11.0
IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user.
local
low complexity
ibm CWE-312
2.1