CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Impactr finds and proves whether CWE-312 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.