Cleartext Storage of Sensitive Information in Memory
CWE-316
The product stores sensitive information in cleartext in memory.
We track 10 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.7.
Latest Cleartext Storage of Sensitive Information in Memory vulnerabilities
- 8.6 High severity
EasyIO Neo IOManager and Tools Installer: Cleartext Storage of Sensitive Information in Memory
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.
- 7.0 High severity
amqp091-go: Cleartext Storage of Sensitive Information in Memory
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshake. The Connection.openComplete method in
- 7.1 High severity
nebula-mesh: Improper Removal of Sensitive Information Before Storage or Transfer
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real *pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private
- 7.5 High severity
Datacap: Cleartext Storage of Sensitive Information in Memory
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and acces
- 9.4 Critical severity
ValveLink SOLO: Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freein
- 7.2 High severity
Check Point SmartConsole: Cleartext Storage of Sensitive Information
Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
- 7.5 High severity
Datacap Navigator: Cleartext Storage of Sensitive Information
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user. IBM X-Force ID: 295791.
- 7.5 High severity
Acronis Cyber Protect 15: Cleartext Storage of Sensitive Information
Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
- 7.3 High severity
QMS Automotive: Cleartext Storage of Sensitive Information in Memory
A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation.
- 7.5 High severity
SGS: Cleartext Storage of Sensitive Information
A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext storage of sensitive information in memory. It is possible to initiate the attack remotely. The exploit h