CVE-2010-4213

The CVE-2010-4213 entry concerns the Bank of America Android app version 2.12, where a security question’s answer is stored in cleartext. This storage allows physically proximate attackers to read sensitive data from the application data. The available connected documents confirm the affected sof...

CVE-2010-4213: Undefined Security Weakness

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

PT-2010-5361

Name of the Vulnerable Software and Affected Versions Bank of America application version 2.12 Description The issue concerns the storage of security question answers in cleartext, potentially allowing physically proximate attackers to obtain sensitive information by accessing application data...

PT-2010-5362

Name of the Vulnerable Software and Affected Versions Wells Fargo Mobile application version 1.1 Description The issue concerns the storage of sensitive information in cleartext, which could allow physically proximate attackers to obtain this information by reading application data. This includes...

CVE-2010-4214: Undefined Security Weakness

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

Design/Logic Flaw

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

CVE-2003-1588

CVE-2003-1588 affects Sun Cluster 2.2 when using HA-Oracle or HA-Sybase DBMS services. The issue is that database credentials are stored in cleartext in a cluster configuration file, allowing local users to read sensitive information from that file. The vulnerability concerns the cluster configur...

CVE-2010-0225: Cleartext Storage of Sensitive Information

SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key...

CVE-2009-2272: Cleartext Storage of Sensitive Information

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

CVE-2008-6828: Cleartext Storage of Sensitive Information

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

Design/Logic Flaw

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2009-1466

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2009-1466: Cleartext Storage of Sensitive Information

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2009-0152: Cleartext Storage of Sensitive Information

iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger AIM communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2009-1603: Cleartext Storage of Sensitive Information

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

CVE-2009-1560

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in 1 passwd.htm and 2 Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code...

CVE-2009-1560: Undefined Security Weakness

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in 1 passwd.htm and 2 Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code...

CVE-2009-0964: Cleartext Storage of Sensitive Information

UserViewlist.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication...

CVE-2008-6193

CVE-2008-6193 affects Sam Crew MyBlog: passwords are stored in cleartext in a MySQL database, enabling potential access to sensitive information. The root cause is cleartext password storage. The connected documents do not provide patch versions or remediation steps. Exploitation details are not ...

CVE-2008-6157: Cleartext Storage of Sensitive Information

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sensitive information...