Skip to content
OpenAdvisories

Weakness (CWE)

CWE-922: Insecure Storage of Sensitive Information

Class Incomplete

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Source: MITRE CWE-922

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.9
    CVE-2024-46635 Public exploit

    An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access s…

  • Medium 6.2
    CVE-2023-45184 Public exploit

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270.

    IBM i Access Client Solutions
  • Medium 6.1
    CVE-2022-1257 Public exploit

    Improper Verification of Cryptographic Signature by McAfee Agent

    Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database fil…

    McAfee,LLC McAfee Agent
  • Medium 4.3
    CVE-2018-25031 Public exploit EPSS 42%

    Spoofing attack in swagger-ui

    Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be r…

    swagger-ui org.webjars:swagger-ui npm Maven
  • Medium 5.3
    CVE-2020-13937 Public exploit EPSS 78%

    Authentication bypass in Apache Kylin

    Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's…

    org.apache.kylin:kylin Maven
  • Medium 5.5
    CVE-2020-1493 Public exploit

    Microsoft Outlook Information Disclosure Vulnerability

    An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific user…

    Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Outlook 2016