Cleartext Storage in a File or on Disk

The product stores sensitive information in cleartext in a file, or on disk.

CVEs (30)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-30406 1Juniper 2Junos Os Evolved Paragon Active Assurance Test Agent Jun 17, 2026 Apr 12, 2024 6.7 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticate...Show more A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials. This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO. This issue does not affect releases before 23.1R1-EVO.Show less
CVE-2023-4066 1Redhat 3Jboss A Mq Jboss MiddlewareOpenshift Container Platform Jun 17, 2026 Sep 27, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details...Show more A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.Show less
CVE-2023-35699 1Sick 1Icr890 4 Firmware Jun 17, 2026 Jul 10, 2023 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.
CVE-2023-2863 1Simpledesign 1Diary With Lock\ Jun 17, 2026 May 24, 2023 N/A· v4 5.5 MEDIUM· v3 1.4 LOW· v2 A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipula...Show more A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229819.Show less
CVE-2023-0114 1Netis Systems 1Netcore Router Firmware Jun 17, 2026 Jan 7, 2023 N/A· v4 5.5 MEDIUM· v3 1.7 LOW· v2 A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads...Show more A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The identifier of this vulnerability is VDB-217592.Show less
CVE-2019-19291 1Siemens 2Sinvr 3 Central Control Server Sinvr 3 Video Server Jun 17, 2026 Mar 10, 2020 N/A· v4 6.5 MEDIUM· v3 3.5 LOW· v2 A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server...Show more A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain log files that store login credentials in cleartext. In configurations where the FTP service is enabled, authenticated remote attackers could extract login credentials of other users of the service.Show less
CVE-2018-10622 1Medtronic 2Mycarelink 24950 Patient Monitor Firmware Mycarelink 24952 Patient Monitor Firmware Jun 22, 2026 Aug 10, 2018 N/A· v4 7.1 HIGH· v3 1.9 LOW· v2 Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.
CVE-2016-6547 1Nutspace 1Nut Mobile Nov 21, 2024 Jul 13, 2018 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.
CVE-2016-6546 1Kkmcn 1Itrackeasy Nov 21, 2024 Jul 13, 2018 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cleartext.
CVE-2016-6538 1Thetrackr 1Trackr Bravo Firmware Nov 21, 2024 Jul 6, 2018 N/A· v4 8.8 HIGH· v3 3.3 LOW· v2 The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor...Show more The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.Show less

Previous 12