Variant weakness
Draft
CWE-314: Cleartext Storage in the Registry
The product stores sensitive information in cleartext in the registry.
Last updated
1
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
Attackers can read the information by accessing the registry key. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
Real-world CVEs
1 recorded CVEs are caused by CWE-314 (Cleartext Storage in the Registry). The highest-severity and most recent are shown first.
Common consequences
What can happen when CWE-314 is exploited.
Read Application Data
Affects: Confidentiality
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
Architecture and Design
Illustrative examples
Real CVEs that MITRE cites as examples of this weakness.