CWE-314: Cleartext Storage in the Registry
The product stores sensitive information in cleartext in the registry.
Last updated
Overview
Attackers can read the information by accessing the registry key. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
Real-world CVEs
1 recorded CVEs are caused by CWE-314 (Cleartext Storage in the Registry). The highest-severity and most recent are shown first.
Common consequences
What can happen when CWE-314 is exploited.
Read Application Data
Affects: Confidentiality
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
Illustrative examples
Real CVEs that MITRE cites as examples of this weakness.