Common Weakness Enumeration
CWE Definition / CWE-922
CWE-922: Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Published:23 Jun 2013
Organization:MITRE
Modified:11 Dec 2025
Related Weakness
CWE-664: Improper Control of a Resource Through its Lifetime
