Cleartext Storage in a File or on Disk
CWE-313
The product stores sensitive information in cleartext in a file, or on disk.
We track 5 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.0.
Latest Cleartext Storage in a File or on Disk vulnerabilities
- 8.2 High severity
openproject: Cleartext Storage in a File or on Disk
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth access_token plaintext to Rails.cache under the deterministic key storage.<id>.httpx_acce
- 7.1 High severity
SIMATIC WinCC Unified PC Runtime V16: Cleartext Storage in a File or on Disk
A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC W
- 9.1 Critical severity
PrinterShare Mobile Print: Exposure of Sensitive Information to an Unauthorized Actor
PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.
- 8.6 High severity
Cisco Data Center Network Manager: Cleartext Storage of Sensitive Information
A vulnerability in the Cisco Nexus Dashboard Fabric Controller (NDFC) software, formerly Cisco Data Center Network Manager (DCNM), could allow an attacker with access to a backup file to view sensitive information. This vulnerability is due to the improper sto
- 7.1 High severity
MXview One Series: Cleartext Storage of Sensitive Information
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.