Variant weakness
Draft
CWE-318: Cleartext Storage of Sensitive Information in Executable
The product stores sensitive information in cleartext in an executable.
Last updated
1
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
Attackers can reverse engineer binary code to obtain secret data. This is especially easy when the cleartext is plain ASCII. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
Real-world CVEs
1 recorded CVEs are caused by CWE-318 (Cleartext Storage of Sensitive Information in Executable). The highest-severity and most recent are shown first.
Common consequences
What can happen when CWE-318 is exploited.
Read Application Data
Affects: Confidentiality
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
Implementation
Illustrative examples
Real CVEs that MITRE cites as examples of this weakness.