# CWE-212.

Every Advisory and CVE whose sources give the weakness CWE-212, newest first.

## Records, newest first (an older page)

- [OpenVPN Connect: OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text…](https://agentprime.io/advisories/CVE-2024-8474.md)
  `CVE-2024-8474` · CVE record: OpenVPN OpenVPN Connect · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-212
- [In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies](https://agentprime.io/advisories/CVE-2024-56353.md)
  `CVE-2024-56353` · CVE record: JetBrains TeamCity · CVSS 5.5 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: CWE-212
- [Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats.](https://agentprime.io/advisories/CVE-2024-41156.md)
  `CVE-2024-41156` · CVE record: Hitachi Energy TRO600 · CVSS 2.7 Low · Not analysed yet · Published 29 Oct 2024 · Tags: CWE-212
- [Windows Kernel-Mode Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-43554.md)
  `CVE-2024-43554` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-212
- [usememos/memos may leak user information to an authenticated user in github.com/usememos/memos](https://agentprime.io/advisories/GHSA-j593-h5v3-45x6.md)
  `GHSA-j593-h5v3-45x6`, `CVE-2022-4734`, `GO-2022-1220` · Go `github.com/usememos/memos`: affected `<0.9.1`, fixed in `0.9.1` · CVSS 8.1 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-212
- [Apache StreamPark: Information leakage vulnerability](https://agentprime.io/advisories/GHSA-hcf8-5j78-887v.md)
  `GHSA-hcf8-5j78-887v`, `CVE-2024-29120` · Maven `org.apache.streampark:streampark`: affected `>=2.0.0, <2.1.4`, fixed in `2.1.4` · CVSS 5.9 Medium · Not analysed yet · Published 17 Jul 2024 · Tags: Information disclosure, CWE-212
- [Devolutions Remote Desktop Manager: Improper removal of sensitive information in data source export feature in Devolutions…](https://agentprime.io/advisories/CVE-2024-6055.md)
  `CVE-2024-6055` · CVE record: Devolutions Remote Desktop Manager · CVSS 4.7 Medium · Not analysed yet · Published 17 Jun 2024 · Tags: CWE-212
- [Information disclosure in podman in github.com/containers/libpod](https://agentprime.io/advisories/GHSA-c3wv-qmjj-45r6.md)
  `GHSA-c3wv-qmjj-45r6`, `CVE-2020-14370`, `GO-2024-2766` · Go `github.com/containers/libpod` and 1 more: affected `*`, no fixed version yet · No CVSS score · Not analysed yet · Published 4 Jun 2024 · Tags: CWE-212
- [Fortinet FortiSOAR: An improper removal of sensitive information before storage or transfer vulnerability…](https://agentprime.io/advisories/CVE-2024-31493.md)
  `CVE-2024-31493` · CVE record: Fortinet FortiSOAR · CVSS 6.0 Medium · Not analysed yet · Published 3 Jun 2024 · Tags: CWE-212
- [SixLabors.ImageSharp vulnerable to data leakage](https://agentprime.io/advisories/GHSA-5x7m-6737-26cr.md)
  `GHSA-5x7m-6737-26cr`, `CVE-2024-32036` · NuGet `SixLabors.ImageSharp`: affected `<2.1.8 || >=3.0.0, <3.1.4`, fixed in `2.1.8`, `3.1.4` · CVSS 5.3 Medium · Not analysed yet · Published 15 Apr 2024 · Tags: CWE-212, CWE-226
- [Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore](https://agentprime.io/advisories/GHSA-vh2m-22xx-q94f.md)
  `GHSA-vh2m-22xx-q94f`, `CVE-2024-32028` · NuGet `OpenTelemetry.Instrumentation.AspNetCore` and 1 more: affected `<1.8.1`, fixed in `1.8.1` · CVSS 4.1 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: Information disclosure, CWE-212
- [Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-52376.md)
  `CVE-2023-52376` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-212
- [Full path of data directory exposed to Nextcloud server users](https://agentprime.io/advisories/CVE-2023-28834.md)
  `CVE-2023-28834` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 3 Apr 2023 · Tags: CWE-212
- [Cockpit Content Platform vulnerable to 2FA bypass](https://agentprime.io/advisories/GHSA-8wj3-cpmr-8whp.md)
  `GHSA-8wj3-cpmr-8whp`, `CVE-2022-2818`, `PKSA-1bzm-v7vr-v5fm` · Packagist `cockpit-hq/cockpit`: affected `<2.2.2`, fixed in `2.2.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2022 · Tags: Authentication bypass, CWE-212, CWE-305
- [Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs](https://agentprime.io/advisories/GHSA-99j7-mhfh-w84p.md)
  `GHSA-99j7-mhfh-w84p`, `CVE-2022-31162`, `RUSTSEC-2022-0086` · crates.io `slack-morphism`: affected `<0.41.0`, fixed in `0.41.0` · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2022 · Tags: Information disclosure, CWE-212, CWE-1258
- [Protected fields exposed via LiveQuery](https://agentprime.io/advisories/GHSA-crrq-vr9j-fxxh.md)
  `GHSA-crrq-vr9j-fxxh`, `BIT-parse-2022-31112`, `CVE-2022-31112` · npm `parse-server`: affected `<4.10.13 || >=5.0.0, <5.2.4`, fixed in `4.10.13`, `5.2.4` · CVSS 8.2 High · Not analysed yet · Published 6 Jul 2022 · Tags: Information disclosure, CWE-212
- [CURLOPT_HTTPAUTH option not cleared on change of origin](https://agentprime.io/advisories/GHSA-25mq-v84q-4j7r.md)
  `GHSA-25mq-v84q-4j7r`, `CVE-2022-31090`, `PKSA-k1b4-kshy-xgbh` · Packagist `guzzlehttp/guzzle`: affected `<6.5.8 || >=7.0.0, <7.4.5`, fixed in `6.5.8`, `7.4.5` · CVSS 7.7 High · Not analysed yet · Published 21 Jun 2022 · Tags: Information disclosure, CWE-212
- [Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk](https://agentprime.io/advisories/CVE-2022-1893.md)
  `CVE-2022-1893` · CVE record: polonel polonel/trudesk · CVSS 4.6 Medium · Not analysed yet · Published 31 May 2022 · Tags: CWE-212
- [Improper Removal of Sensitive Information Before Storage or Transfer in Strapi](https://agentprime.io/advisories/GHSA-vgj7-895j-gpr6.md)
  `GHSA-vgj7-895j-gpr6`, `CVE-2022-30618` · npm `strapi` and 1 more: affected `>=3.0.0, <3.6.9`, fixed in `3.6.9` · CVSS 7.5 High · Not analysed yet · Published 20 May 2022 · Tags: CWE-212
- [Improper Removal of Sensitive Information Before Storage or Transfer in Strapi](https://agentprime.io/advisories/GHSA-f6fm-r26q-p747.md)
  `GHSA-f6fm-r26q-p747`, `CVE-2022-30617` · npm `strapi` and 1 more: affected `>=3.0.0, <3.6.9`, fixed in `3.6.9` · CVSS 8.8 High · Not analysed yet · Published 20 May 2022 · Tags: CWE-212
- [ovirt-engine Logs Plaintext Passwords To File](https://agentprime.io/advisories/GHSA-m833-87vf-576c.md)
  `GHSA-m833-87vf-576c`, `CVE-2017-15113` · Maven `org.ovirt.engine.sdk:ovirt-engine-sdk-java`: affected `<4.1.7.6`, fixed in `4.1.7.6` · CVSS 7.2 High · Withdrawn · Not analysed yet · Published 13 May 2022 · Tags: Information disclosure, CWE-212
- [Exposure of Sensitive Information in eventsource](https://agentprime.io/advisories/GHSA-6h5x-7c5m-7cr7.md)
  `GHSA-6h5x-7c5m-7cr7`, `CVE-2022-1650` · npm `eventsource`: affected `<1.1.1 || >=2.0.0, <2.0.2`, fixed in `1.1.1`, `2.0.2` · CVSS 8.1 High · Not analysed yet · Published 13 May 2022 · Tags: Information disclosure, CWE-212
- [Intel(R) SSD and Intel(R) Optane(TM) SSD Products: Sensitive information in resource not removed before reuse in firmware for some Intel(R)…](https://agentprime.io/advisories/CVE-2021-33082.md)
  `CVE-2021-33082` · CVE record: Intel(R) SSD and Intel(R) Optane(TM) SSD Products · CVSS 4.6 Medium · Not analysed yet · Published 12 May 2022 · Tags: CWE-212
- [Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R)…: Exposure of sensitive system information due to uncleared debug information in firmware…](https://agentprime.io/advisories/CVE-2021-33080.md)
  `CVE-2021-33080` · CVE record: Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products · CVSS 6.8 Medium · Not analysed yet · Published 12 May 2022 · Tags: CWE-212
- [Improper Removal of Sensitive Information Before Storage or Transfer in irrd](https://agentprime.io/advisories/GHSA-cqxx-66wh-8pjw.md)
  `GHSA-cqxx-66wh-8pjw`, `CVE-2022-24798`, `PYSEC-2022-178` · PyPI `irrd`: affected `>=4.2.0, <4.2.3`, fixed in `4.2.3` · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2022 · Tags: CWE-212
- [Forwarding of confidentials headers to third parties in fluture-node](https://agentprime.io/advisories/GHSA-32x6-qvw6-mxj4.md)
  `GHSA-32x6-qvw6-mxj4`, `CVE-2022-24719`, `PYSEC-2022-43051`, `PYSEC-2022-43052` · npm `fluture-node`: affected `>=4.0.0, <4.0.2`, fixed in `4.0.2` · CVSS 2.6 Low · Not analysed yet · Published 1 Mar 2022 · Tags: Information disclosure, Open redirect, CWE-212
- [Jenkins Support Core Plugin stores sensitive data in plain text](https://agentprime.io/advisories/GHSA-5m8f-v3gw-h94w.md)
  `GHSA-5m8f-v3gw-h94w`, `CVE-2022-25187` · Maven `org.jenkins-ci.plugins:support-core`: affected `<2.79.1`, fixed in `2.79.1` · CVSS 6.5 Medium · Not analysed yet · Published 16 Feb 2022 · Tags: Information disclosure, Hard-coded credentials, CWE-212
- [Exposure of information in Action Pack](https://agentprime.io/advisories/GHSA-wh98-p28r-vrc9.md)
  `GHSA-wh98-p28r-vrc9`, `CVE-2022-23633` · RubyGems `actionpack`: affected `>=5.0.0.0, <5.2.6.2 || >=6.0.0.0, <6.0.4.6 || >=6.1.0.0, <6.1.4.6 || >=7.0.0.0, <7.0.2.2`, fixed in `5.2.6.2`, `6.0.4.6`, `6.1.4.6`, `7.0.2.2` · CVSS 7.4 High · Not analysed yet · Published 11 Feb 2022 · Tags: Information disclosure, CWE-212
- [Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects](https://agentprime.io/advisories/GHSA-pw2r-vq6v-hr8c.md)
  `GHSA-pw2r-vq6v-hr8c`, `CVE-2022-0536` · npm `follow-redirects`: affected `<1.14.8`, fixed in `1.14.8` · CVSS 2.6 Low · Not analysed yet · Published 10 Feb 2022 · Tags: Information disclosure, CWE-212
- [Expired Ephemeral Messages not reliably removed in wire-webapp](https://agentprime.io/advisories/CVE-2022-23605.md)
  `CVE-2022-23605` · CVE record: wireapp wire-webapp · CVSS 4.4 Medium · Not analysed yet · Published 4 Feb 2022 · Tags: CWE-212
- [Exposure of Sensitive Information in simple-get](https://agentprime.io/advisories/GHSA-wpg7-2c88-r8xv.md)
  `GHSA-wpg7-2c88-r8xv`, `CVE-2022-0355` · npm `simple-get`: affected `<2.8.2 || >=3.0.0, <3.1.1 || >=4.0.0, <4.0.1`, fixed in `2.8.2`, `3.1.1`, `4.0.1` · CVSS 8.8 High · Not analysed yet · Published 28 Jan 2022 · Tags: Information disclosure, CWE-212
- [Improper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak](https://agentprime.io/advisories/GHSA-3h68-wvv6-8r5h.md)
  `GHSA-3h68-wvv6-8r5h`, `CVE-2020-1940` · Maven `org.apache.jackrabbit:oak-core`: affected `>=1.12.0, <1.24.0 || >=1.10.0, <1.10.8`, fixed in `1.24.0`, `1.10.8` · CVSS 7.5 High · Not analysed yet · Published 10 Dec 2021 · Tags: Information disclosure, CWE-212
- [Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault](https://agentprime.io/advisories/GHSA-6239-28c2-9mrm.md)
  `GHSA-6239-28c2-9mrm`, `BIT-vault-2021-38554`, `CVE-2021-38554`, `GO-2022-0632` · Go `github.com/hashicorp/vault`: affected `<1.6.6 || >=1.7.0, <1.7.4`, fixed in `1.6.6`, `1.7.4` · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2021 · Tags: CWE-212
- [Buildah processes using chroot isolation may leak environment values to intermediate processes](https://agentprime.io/advisories/GHSA-7638-r9r3-rmjj.md)
  `GHSA-7638-r9r3-rmjj`, `CVE-2021-3602`, `GO-2022-0345` · Go `github.com/containers/buildah`: affected `<1.16.8 || >=1.17.0, <1.17.2 || >=1.18.0, <1.19.9 || >=1.20.0, <1.21.3`, fixed in `1.16.8`, `1.17.2`, `1.19.9`, `1.21.3` · CVSS 5.5 Medium · Not analysed yet · Published 19 Jul 2021 · Tags: Information disclosure, CWE-212
- [An information disclosure vulnerability was found in libvirt in versions before 6.3.0.](https://agentprime.io/advisories/CVE-2020-14301.md)
  `CVE-2020-14301` · CVE record: libvirt · No CVSS score · Not analysed yet · Published 27 May 2021 · Tags: CWE-212
- [A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. ...](https://agentprime.io/advisories/GHSA-f556-49jc-4rvc.md)
  `GHSA-f556-49jc-4rvc`, `CVE-2020-25635`, `PYSEC-2020-220` · PyPI `ansible`: affected `<2.10.1`, fixed in `2.10.1` · CVSS 5.0 Medium · Not analysed yet · Published 5 Oct 2020 · Tags: CWE-212
- [RCE in Symfony](https://agentprime.io/advisories/GHSA-754h-5r27-7x3r.md)
  `GHSA-754h-5r27-7x3r`, `BIT-symfony-2020-15094`, `CVE-2020-15094`, `PKSA-6pwr-137g-8814`, `PKSA-8knv-7jsn-12w8` · Packagist `symfony/http-kernel` and 1 more: affected `>=4.3.0, <4.4.13 || >=5.0.0, <5.1.5`, fixed in `4.4.13`, `5.1.5` · CVSS 8.0 High · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-212
- [folly::secureRandom will re-use a buffer between parent and child processes when fork() is called.](https://agentprime.io/advisories/CVE-2018-6337.md)
  `CVE-2018-6337` · CVE record: Facebook HHVM and 1 more · CVSS 7.5 High · Not analysed yet · Published 31 Dec 2018 · Tags: CWE-212
- [Rapid7 Komand: In Rapid7 Komand version 0.41.0 and prior…](https://agentprime.io/advisories/CVE-2018-5559.md)
  `CVE-2018-5559` · CVE record: Rapid7 Komand · CVSS 3.4 Low · Not analysed yet · Published 28 Nov 2018 · Tags: CWE-212
- [oVirt: A vulnerability was discovered in oVirt 4.1.x before 4.1.9…](https://agentprime.io/advisories/CVE-2018-1062.md)
  `CVE-2018-1062` · CVE record: oVirt oVirt · No CVSS score · Not analysed yet · Published 6 Mar 2018 · Tags: CWE-212
- [OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which...](https://agentprime.io/advisories/GHSA-rwhr-h69g-8qmq.md)
  `GHSA-rwhr-h69g-8qmq`, `CVE-2012-5625`, `PYSEC-2012-42` · PyPI `nova`: affected , no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 26 Dec 2012 · Tags: CWE-212
- [OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which...](https://agentprime.io/advisories/PYSEC-2012-41.md)
  `PYSEC-2012-41`, `CVE-2012-5625` · PyPI `nova`: affected `*`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 26 Dec 2012 · Tags: CWE-212

Newest: <https://agentprime.io/advisories/tag/cwe-212.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-212&cursor=WyIyMDI1LTAyLTA0VDIyOjA2OjExLjAwMDAwMFoiLCJHSFNBLWhjcjUtd3Y0cC1oMmcyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-212/?cursor=WyIyMDI1LTAyLTA0VDIyOjA2OjExLjAwMDAwMFoiLCJHSFNBLWhjcjUtd3Y0cC1oMmcyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.