CWE-318: Cleartext Storage of Sensitive Information in Executable
Filter
The product stores sensitive information in cleartext in an executable.
What the weakness is: CWE-318 at MITRE. All weaknesses
Related attack patterns (CAPEC): 2
- CAPEC-37 Retrieve Embedded Sensitive Data Likelihood: High · Severity: Very High
- CAPEC-65 Sniff Application Code Likelihood: Low · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-318, as MITRE names them. Credits.
Ask an AI about CWE-318
Show the prompt
Explain CWE-318: Cleartext Storage of Sensitive Information in Executable and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/318.html and https://cve.bz/cve/cwe/318?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.1CVE-2022-34388EPSS 0.2%
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability. A local malicious user with low privileges could exploit this vulnerabil…