CWE-318 Cleartext Storage of Sensitive Information in Executable
variantThe product stores sensitive information in cleartext in an executable.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2005-1794US | medium6.4 | Exploit | ||
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoo… | ||||
| CVE-2022-34388US | high7.1OT elevated | — | ||
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability. A local mali… | ||||
| CVE-2022-34801US | medium4.3OT elevated | — | ||
Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. | ||||
03
attack patterns (2)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan