Cleartext storage of sensitive information in a cookie occurs when unencrypted and non-hashed sensitive information, such as personally identifiable information (PII), is stored in browser cookies. Exploitation may occur when an attacker is able to access these cookies by intercepting HTTP traffic or by accessing the web browser directly.