Variant weakness
Draft
CWE-314: Cleartext Storage in the Registry
The product stores sensitive information in cleartext in the registry.
1
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
Attackers can read the information by accessing the registry key. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
Real-world CVEs
1 recorded CVEs are caused by CWE-314 (Cleartext Storage in the Registry). The highest-severity and most recent are shown first.