CWE-921: Storage of Sensitive Data in a Mechanism without Access Control
The product stores sensitive information in a file system or device that does not have built-in access control.
9 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-30016 — Authentication Bypass Vulnerability in SAP Financial Consolidation
- CVE-2024-9334 — Information Disclosure in E-Kent's Pallium Vehicle Tracking
- CVE-2025-24870 — Insecure Key & Secret Management vulnerability in SAP GUI for Windows
- CVE-2025-24843 — Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control
- CVE-2024-5206 — Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn
Recently published
- CVE-2025-30016 — Authentication Bypass Vulnerability in SAP Financial Consolidation
- CVE-2025-24843 — Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control
- CVE-2024-9334 — Information Disclosure in E-Kent's Pallium Vehicle Tracking
- CVE-2025-24870 — Insecure Key & Secret Management vulnerability in SAP GUI for Windows
- CVE-2024-5206 — Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn