CVEbaza.pl › CWE Dictionary › CWE-314

Common Weakness Enumeration

CWE-314

Cleartext Storage in the Registry

Category: VariantCVE: 1

Description

The product stores sensitive information in cleartext in the registry.

Extended Description

Attackers can read the information by accessing the registry key. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.

CVE vulnerabilities with CWE-314 (1)

6.5

CVSS

MEDIUM

CVE-2023-2335

Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve Admin user credentials This issue affects surelock windows: from 2.3.12 through 2.40.0.

pub. 2023-04-27

Information

ID: CWE-314

Type: Variant

Vulnerabilities: 1

MITRE CWE ↗

← CWE Dictionary