← Back
CWE-526

22 CVEs • Abstraction: Variant

Cleartext Storage of Sensitive Information in an Environment Variable

The product uses an environment variable to store unencrypted sensitive information.

JSON object

Loading...

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-35931
1Shescape Project
1Shescape
Jun 17, 2026
Jun 23, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.
CVE-2014-2377
1Ecava
1Integraxor
May 6, 2026
Sep 15, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.