CWE-312
Cleartext Storage of Sensitive Information
AI Translation Available
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Status
draft
Abstraction
base
Affected Platforms
Cloud Computing
ICS/OT
Mobile
Technical Details
AI Translation
Common Consequences
confidentiality
Impacts
read application data
Detection Methods
automated static analysis
Potential Mitigations
Phases:
implementation
system configuration
operation
Descriptions:
•
In some systems/environments such as cloud, the use of "double encryption" (at both the software and hardware layer) might be required, and the developer might be solely responsible for both layers, instead of shared responsibility with the administrator of the broader system/environment.
•
When storing data in the cloud (e.g., S3 buckets, Azure blobs, Google Cloud Storage, etc.), use the provider's controls to encrypt the data at rest. [REF-1297] [REF-1299] [REF-1301]