CWE-313
Cleartext Storage in a File or on Disk
AI Translation Available
The product stores sensitive information in cleartext in a file, or on disk.
Status
draft
Abstraction
variant
Affected Platforms
Extended Description
AI Translation
The sensitive information could be read by attackers with access to the file, or with physical or administrator access to the raw disk. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
Technical Details
AI Translation
Common Consequences
confidentiality
Impacts
read application data
Detection Methods
automated static analysis