The product does not encrypt sensitive or critical information before storage or transmission.
Source: MITRE CWE™ — CWE-311