CWE-212.

OpenVPN Connect: OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text…

• OpenVPN Connect
• CWE-212

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies

• JetBrains TeamCity
• CWE-212

Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats.

• Hitachi Energy TRO600
• CWE-212

Windows Kernel-Mode Driver Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-212

usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

• CWE-212

<0.9.1 · fixed in 0.9.1

Apache StreamPark: Information leakage vulnerability

• Information disclosure
• CWE-212

>=2.0.0, <2.1.4 · fixed in 2.1.4

Devolutions Remote Desktop Manager: Improper removal of sensitive information in data source export feature in Devolutions…

• Devolutions Remote Desktop Manager
• CWE-212

Information disclosure in podman in github.com/containers/libpod

• CWE-212

* · no fixed version yet

Fortinet FortiSOAR: An improper removal of sensitive information before storage or transfer vulnerability…

• Fortinet FortiSOAR
• CWE-212

SixLabors.ImageSharp vulnerable to data leakage

• CWE-212
• CWE-226

<2.1.8 || >=3.0.0, <3.1.4 · fixed in 2.1.8, 3.1.4

Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore

• Information disclosure
• CWE-212

<1.8.1 · fixed in 1.8.1

Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-212

Full path of data directory exposed to Nextcloud server users

• nextcloud security-advisories
• CWE-212

Cockpit Content Platform vulnerable to 2FA bypass

• Authentication bypass
• CWE-212

<2.2.2 · fixed in 2.2.2

Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs

• Information disclosure
• CWE-212

<0.41.0 · fixed in 0.41.0

Protected fields exposed via LiveQuery

• Information disclosure
• CWE-212

<4.10.13 || >=5.0.0, <5.2.4 · fixed in 4.10.13, 5.2.4

CURLOPT_HTTPAUTH option not cleared on change of origin

• Information disclosure
• CWE-212

<6.5.8 || >=7.0.0, <7.4.5 · fixed in 6.5.8, 7.4.5

Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk

• polonel/trudesk
• CWE-212

Improper Removal of Sensitive Information Before Storage or Transfer in Strapi

• CWE-212

>=3.0.0, <3.6.9 · fixed in 3.6.9

Improper Removal of Sensitive Information Before Storage or Transfer in Strapi

• CWE-212

>=3.0.0, <3.6.9 · fixed in 3.6.9

ovirt-engine Logs Plaintext Passwords To File

• Information disclosure
• CWE-212

<4.1.7.6 · fixed in 4.1.7.6

Exposure of Sensitive Information in eventsource

• Information disclosure
• CWE-212

<1.1.1 || >=2.0.0, <2.0.2 · fixed in 1.1.1, 2.0.2

Intel(R) SSD and Intel(R) Optane(TM) SSD Products: Sensitive information in resource not removed before reuse in firmware for some Intel(R)…

• Intel(R) SSD and Intel(R) Optane(TM) SSD Products
• CWE-212

Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R)…: Exposure of sensitive system information due to uncleared debug information in firmware…

• Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products
• CWE-212

Improper Removal of Sensitive Information Before Storage or Transfer in irrd

• CWE-212

>=4.2.0, <4.2.3 · fixed in 4.2.3

Forwarding of confidentials headers to third parties in fluture-node

• Information disclosure
• Open redirect

>=4.0.0, <4.0.2 · fixed in 4.0.2

Jenkins Support Core Plugin stores sensitive data in plain text

• Information disclosure
• Hard-coded credentials

<2.79.1 · fixed in 2.79.1

Exposure of information in Action Pack

• Information disclosure
• CWE-212

>=5.0.0.0, <5.2.6.2 || >=6.0.0.0, <6.0.4.6 || >=6.1.0.0, <6.1.4.6 || >=7.0.0.0, <7.0.2.2 · fixed in 5.2.6.2, 6.0.4.6, 6.1.4.6, 7.0.2.2

Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects

• Information disclosure
• CWE-212

<1.14.8 · fixed in 1.14.8

Expired Ephemeral Messages not reliably removed in wire-webapp

• wireapp wire-webapp
• CWE-212

Exposure of Sensitive Information in simple-get

• Information disclosure
• CWE-212

<2.8.2 || >=3.0.0, <3.1.1 || >=4.0.0, <4.0.1 · fixed in 2.8.2, 3.1.1, 4.0.1

Improper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak

• Information disclosure
• CWE-212

>=1.12.0, <1.24.0 || >=1.10.0, <1.10.8 · fixed in 1.24.0, 1.10.8

Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault

• CWE-212

<1.6.6 || >=1.7.0, <1.7.4 · fixed in 1.6.6, 1.7.4

Buildah processes using chroot isolation may leak environment values to intermediate processes

• Information disclosure
• CWE-212

<1.16.8 || >=1.17.0, <1.17.2 || >=1.18.0, <1.19.9 || >=1.20.0, <1.21.3 · fixed in 1.16.8, 1.17.2, 1.19.9, 1.21.3

An information disclosure vulnerability was found in libvirt in versions before 6.3.0.

• libvirt
• CWE-212

A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. ...

• CWE-212

<2.10.1 · fixed in 2.10.1

RCE in Symfony

• CWE-212

>=4.3.0, <4.4.13 || >=5.0.0, <5.1.5 · fixed in 4.4.13, 5.1.5

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called.

• Facebook HHVM
• Facebook folly
• CWE-212

Rapid7 Komand: In Rapid7 Komand version 0.41.0 and prior…

• Rapid7 Komand
• CWE-212

oVirt: A vulnerability was discovered in oVirt 4.1.x before 4.1.9…

• oVirt
• CWE-212

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which...

• CWE-212

· no fixed version yet

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which...

• CWE-212

* · no fixed version yet