Storing sensitive data in plaintext in a file, or on disk,
makes the data more easily accessible than if encrypted. This significantly
lowers the difficulty of exploitation by attackers.
Plaintext storage of private key and passphrase in
log file when user imports the key.
Potential Mitigations
Phase
Description
Secret information should not be stored in plaintext in a file or
disk. Even if heavy fortifications are in place, sensitive data should
be encrypted to prevent the risk of losing confidentiality.
Description
