Skip to content
OpenAdvisories

Weakness (CWE)

CWE-922: Insecure Storage of Sensitive Information

Class Incomplete

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Source: MITRE CWE-922

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.9
    CVE-2024-22371 Public exploit

    Apache Camel issue on ExchangeCreatedEvent

    Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, …

    Apache Software Foundation Apache Camel org.apache.camel:camel-core Maven