Skip to content
OpenAdvisories

Weakness (CWE)

CWE-922: Insecure Storage of Sensitive Information

Class Incomplete

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Source: MITRE CWE-922

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2023-45182 Public exploit

    IBM i Access Client Solutions information disclosure

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded. By somehow gaining access to the encrypted password, a local attacker could exploit this vulnerability to obtain t…

    IBM i Access Client Solutions
  • High 7.5
    CVE-2022-41876 Public exploit

    ezplatform-graphql GraphQL queries can expose password hashes

    ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecure Storage of Sensitive Information. Unauthenticated GraphQL queries for user accounts can expose password hash…

    ezsystems ezplatform-graphql ezsystems/ezplatform-graphql Packagist