cve.bz

CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer, page 2

Filter

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

What the weakness is: CWE-212 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-168 Windows ::DATA Alternate Data Stream Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-212, as MITRE names them. Credits.

Ask an AI about CWE-212

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/212.html and https://cve.bz/cve/cwe/212?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2025-62483EPSS 0.3%

    Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.

  2. 3.5CVE-2025-64326EPSS 0.2%

    Weblate is a web based localization tool. In versions 5.14 and below, Weblate leaks the IP address of the project member inviting the user to the project in the audit log. The audit log includes IP addresses from admin-triggered actions, …

  3. 3.3CVE-2025-0011EPSS 0.2%

    Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality.

  4. 7.5CVE-2025-58049EPSS 0.4%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs st…

  5. 5.3CVE-2025-57757EPSS 0.3%

    Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, if a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. This issue has b…

  6. 7.5CVE-2025-1759EPSS 0.4%

    IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

  7. 5.5CVE-2025-33013EPSS 0.2%

    IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user d…

  8. 4.5CVE-2025-53886EPSS 0.5%

    Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows with the WebHook trigger all incoming request details are logged including se…

  9. 3.3CVE-2025-48708EPSS 0.3%

    gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.

  10. 5.5CVE-2025-48066EPSS 0.1%

    wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an issue with function to delete local data. Instructing the client to delete its local database on user logout does not r…

  11. 5.3CVE-2025-27221EPSS 0.5%

    In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.

  12. 4.4CVE-2025-20118EPSS 0.2%

    A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have …

  13. 5.1CVE-2025-24884EPSS 0.2%

    kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in t…

  14. 7.5CVE-2024-8474EPSS 0.5%

    OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic

  15. 6.5CVE-2024-56353EPSS 0.3%

    In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies

  16. 2.7CVE-2024-41156EPSS 0.4%

    Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network. Profiles can only be exported by authent…

  17. 7.5CVE-2024-49997EPSS 1.1%

    In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on …

  18. 5.5CVE-2024-43554EPSS 0.6%

    Windows Kernel-Mode Driver Information Disclosure Vulnerability

  19. 5.9CVE-2024-29120EPSS 0.3%

    In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as the front-end authentication credential. User can use this credential to request other users' information, including …

  20. 4.7CVE-2024-6055EPSS 0.5%

    Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials config…

  21. 6.5CVE-2024-31493EPSS 0.5%

    An improper removal of sensitive information before storage or transfer vulnerability [CWE-212] in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector p…

  22. 6.5CVE-2024-32036EPSS 0.6%

    ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potent…

  23. 4.1CVE-2024-32028EPSS 0.3%

    OpenTelemetry dotnet is a dotnet telemetry framework. In affected versions of `OpenTelemetry.Instrumentation.Http` and `OpenTelemetry.Instrumentation.AspNetCore` the `url.full` writes attribute/tag on spans (`Activity`) when tracing is ena…

  24. 7.5CVE-2023-52376EPSS 0.3%

    Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.

  25. 6.5CVE-2023-48308EPSS 0.5%

    Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar ap…

  26. 4.6CVE-2023-41967EPSS 0.3%

    Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its confi…

  27. 5.5CVE-2023-3006EPSS 0.3%

    A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history…

  28. 4.3CVE-2023-28834EPSS 0.8%

    Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server 23.0.0 until 23.0.11, 24.0.0 until 24.0.6, and 25.0.0 until 25.0.4, have an info…

  29. 5.5CVE-2023-1637EPSS 0.2%

    A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user cou…

  30. 7.5CVE-2022-3460EPSS 0.6%

    In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview.

  31. 4.3CVE-2022-4734EPSS 0.8%

    Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.

  32. 8.6CVE-2022-39393EPSS 0.9%

    Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap s…

  33. 5.5CVE-2022-0171EPSS 0.3%

    A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure E…

  34. 8.8CVE-2022-2818EPSS 1.7%

    Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.

  35. 7.5CVE-2022-31162EPSS 0.9%

    Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret…

  36. 6.5CVE-2022-29900EPSS 3.9%

    Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

  37. 7.1CVE-2022-33740EPSS 0.3%

    Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions befo…

  38. 8.2CVE-2022-31112EPSS 1.3%

    Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions parse Server LiveQuery does not remove protected fields in classes, passing them to the client. The LiveQueryContr…

  39. 7.7CVE-2022-31090EPSS 1.9%

    Guzzle, an extensible PHP HTTP client. `Authorization` headers on requests are sensitive information. In affected versions when using our Curl handler, it is possible to use the `CURLOPT_HTTPAUTH` option to specify an `Authorization` heade…

  40. 7.5CVE-2021-46813EPSS 0.7%

    Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability.

  41. 7.5CVE-2022-31043EPSS 2.0%

    Guzzle is an open source PHP HTTP client. In affected versions `Authorization` headers on requests are sensitive information. On making a request using the `https` scheme to a server which responds with a redirect to a URI with the `http` …

  42. 7.5CVE-2022-31042EPSS 2.0%

    Guzzle is an open source PHP HTTP client. In affected versions the `Cookie` headers on requests are sensitive information. On making a request using the `https` scheme to a server which responds with a redirect to a URI with the `http` sch…

  43. 5.3CVE-2022-1893EPSS 0.8%

    Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3.

  44. 7.5CVE-2022-30618EPSS 1.0%

    An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and password reset tokens, for API users if content types accessible to the authenticated user contain relationships to API user…

  45. 8.8CVE-2022-30617EPSS 1.5%

    An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and password reset tokens, for other admin panel users that have a relationship (e.g., created by, updated by) with content acce…

  46. 4.6CVE-2021-33082EPSS 0.3%

    Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.

  47. 6.8CVE-2021-33080EPSS 0.3%

    Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable infor…

  48. 9.3CVE-2022-1650EPSS 1.9%

    Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

  49. 7.5CVE-2022-24798EPSS 1.4%

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to `mntner` objects and database exports. This may have…

  50. 6.5CVE-2021-26341EPSS 0.3%

    Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.