Common Weakness Enumeration

CWE-921 Storage of Sensitive Data in a Mechanism without Access Control

Description

The product stores sensitive information in a file system or device that does not have built-in access control.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-921 ordered by modification date.

3 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-hj57-j5cw-2mwp CVE-2022-1706 MODERATE
golang/github.com/coreos/ignition golang/github.com/coreos/ignition/v2

Ignition config accessible to unprivileged software on VMware

 2026-03-11
GHSA-jw8x-6495-233v CVE-2024-5206 MODERATE
pypi/scikit-learn

scikit-learn sensitive data leakage vulnerability

 2024-10-25
GHSA-36cm-h8gv-mg97 CVE-2023-2665 HIGH -

RosarioSIS Stores Sensitive Data in a Mechanism without Access Control

 2023-05-19