CWE•Variant•Draft•12 recent CVEs

CWE-316Cleartext Storage of Sensitive Information in Memory

The product stores sensitive information in cleartext in memory.

Confidentiality→Read Memory
Memory could be read by attackers with administrator privileges, which may be a concern in some threat models. However, even without admin privileges, swapping could cause the memory to be written to disk and leave it accessible to physical