Fallos del tipo CWE-316

42 resultados

Armazenamento de dados sensíveis em claro na memória

A aplicação mantém informações sensíveis (senhas, tokens, chaves criptográficas) em texto plano na memória RAM durante a execução. Um atacante que ganhe acesso ao processo (via dump de memória, debugger, ou vulnerabilidade de leitura) consegue extrair esses dados diretamente sem precisar quebrar criptografia.

Ejemplo

Um app lê a senha do usuário em uma string e a mantém intacta na memória enquanto executa operações. Se o código cair em um debugger, ou se um dump de memória for capturado, a senha fica visível em claro. Outro caso: armazenar tokens JWT decodificados em variáveis globais sem limpeza após uso.

Cómo mitigar

Zerize (sobrescreva) dados sensíveis logo após o uso com funções específicas (ex: `sodium_memzero()` em PHP, `SecureString` em .NET, ou estruturas `volatile` em C/C++). Considere usar gerenciadores de segredos (HashiCorp Vault, AWS Secrets Manager) e evite armazenar credenciais em memória por mais tempo que o necessário.

CVE-2025-65832MEDIUMThe mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has EPSS 0.1%CVE-2024-9203LOWEnpass Password Manager sensitive information in memoryEPSS 0.1%CVE-2022-33918MEDIUMDell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploEPSS 0.1%CVE-2025-56565HIGHDD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within noEPSS 0.1%CVE-2023-40724HIGHA vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attackeEPSS 0.1%CVE-2025-48930LOWThe TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to aEPSS 0.1%CVE-2026-77407HIGHRabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct FieldsEPSS 0.1%CVE-2025-50109HIGHEmerson ValveLink Products Cleartext Storage of Sensitive Information in MemoryEPSS 0.1%CVE-2026-53604HIGHnebula-mesh: CA private key not zeroized on web mobile-bundle error pathsEPSS 0.1%CVE-2025-61713LOWA Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPEPSS 0.1%CVE-2021-23211MEDIUMCleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption keyEPSS 0.1%CVE-2025-42888MEDIUMInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.1%CVE-2026-0857MEDIUMCleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server ComponenEPSS 0.1%CVE-2025-60791MEDIUMEasywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bouEPSS 0.1%CVE-2025-9970MEDIUMApplication credential stored in clear text in memoryEPSS 0.1%CVE-2026-24319MEDIUMInformation Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)EPSS 0.1%CVE-2023-23349LOWKaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled crEPSS 0.1%CVE-2025-4618MEDIUMPrisma Browser: Sensitive Information Disclosure Vulnerability in Prisma BrowserEPSS 0.1%CVE-2024-25649MEDIUMIn Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the folloEPSS 0.1%CVE-2026-75137MEDIUMUpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after LockEPSS 0.1%