762
Reference Description
https://www.cve.org/CVERecord?id=CVE-2002-1949
CVE-2008-4122 Chain: Use of HTTPS cookie without "secure" flag causes it to be transmitted
across unencrypted HTTP.
https://www.cve.org/CVERecord?id=CVE-2008-4122
CVE-2008-3289 Product sends password hash in cleartext in violation of intended policy.
https://www.cve.org/CVERecord?id=CVE-2008-3289
CVE-2008-4390 Remote management feature sends sensitive information including passwords
in cleartext.
https://www.cve.org/CVERecord?id=CVE-2008-4390
CVE-2007-5626 Backup routine sends password in cleartext in email.
https://www.cve.org/CVERecord?id=CVE-2007-5626
CVE-2004-1852 Product transmits Blowfish encryption key in cleartext.
https://www.cve.org/CVERecord?id=CVE-2004-1852
CVE-2008-0374 Printer sends configuration information, including administrative password, in
cleartext.
https://www.cve.org/CVERecord?id=CVE-2008-0374
CVE-2007-4961 Chain: cleartext transmission of the MD5 hash of password enables attacks
against a server that is susceptible to replay (CWE-294).
https://www.cve.org/CVERecord?id=CVE-2007-4961
CVE-2007-4786 Product sends passwords in cleartext to a log server.
https://www.cve.org/CVERecord?id=CVE-2007-4786
CVE-2005-3140 Product sends file with cleartext passwords in e-mail message intended for
diagnostic purposes.
https://www.cve.org/CVERecord?id=CVE-2005-3140
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 719 OWASP Top Ten 2007 Category A8 - Insecure
Cryptographic Storage
629 2333
MemberOf 720 OWASP Top Ten 2007 Category A9 - Insecure
Communications
629 2333
MemberOf 729 OWASP Top Ten 2004 Category A8 - Insecure Storage 711 2338
MemberOf 803 2010 Top 25 - Porous Defenses 800 2355
MemberOf 816 OWASP Top Ten 2010 Category A7 - Insecure
Cryptographic Storage
809 2359
MemberOf 818 OWASP Top Ten 2010 Category A9 - Insufficient
Transport Layer Protection
809 2359
MemberOf 861 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 18 - Miscellaneous (MSC)
844 2370
MemberOf 866 2011 Top 25 - Porous Defenses 900 2372
MemberOf 930 OWASP Top Ten 2013 Category A2 - Broken
Authentication and Session Management
928 2389
MemberOf 934 OWASP Top Ten 2013 Category A6 - Sensitive Data
Exposure
928 2391
MemberOf 963 SFP Secondary Cluster: Exposed Data 888 2400
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1029 OWASP Top Ten 2017 Category A3 - Sensitive Data
Exposure
1026 2436
CWE Version 4.14
CWE-311: Missing Encryption of Sensitive Data
CWE-311: Missing Encryption of Sensitive Data