CWE-1258: Exposure of Sensitive System Information Due to Uncleared Debug Information
The hardware product enters debug mode but does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations.
A kind of CWE-1272 Sensitive Information Uncleared Before Debug/Power State Transition.
From the CWE List. © The MITRE Corporation.
Newest
- nvidia infrastructure controller, infra controller +1 more NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause... 4.1 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 3.3 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 2.4 Low
- denishua wpjam basic WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability 7.5 High
- crocoblock jetblog WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerability 7.5 High
- canonical ubuntu, ubuntu subiquity +1 more Senstive information disclosure was affecting subiquity 2.7 Low
- canonical ubuntu, ubuntu desktop provision +1 more Senstive information disclosure was affecting ubuntu-desktop-provision 2.7 Low
- dell integrated dell remote access controller Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G... 4.9 Medium
- dell idrac9, emc nx440, emc storage nx3240 +222 more +224 more Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure... 4.9 Medium
- 1clickmigration 1 click wordpress migration WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability 5.3 Medium
- debian linux, linux kernel +1 more Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails 9.3 Critical
- linux, linux kernel +1 more Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl 9.6 Critical
- nextcloud calendar, kiteworks security-advisories +1 more Calendar app returns full stacktrace when an error happens while editing appointment 3.5 Low
- intel unison software Exposure of sensitive system information due to uncleared debug information for some Intel Unison... 3.3 Low
- slack morphism project morphism, abdolence slack-morphism-rust +1 more Exposure of sensitive Slack webhook URLs in debug logs and traces 7.5 High
- slack morphism project morphism, abdolence slack-morphism-rust +1 more Slack Morphism for Rust before 0.41.0 can accidentally leak Slack OAuth client information in application debug logs 7.5 High