CWE-201: Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- freedesktop xdg-utilsA flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling...6.5 Medium
- moodle, fedoraproject fedora +1 moreExposure of Sensitive Information to an Unauthorized Actor in Moodle5.3 Medium
mongoosenpmRemote Memory Exposure in mongoose5.1 Medium- multiple vendors all trailer power line communications are affected. trailer power line communications, nmfc power line communications +1 moreTrailer Power Line Communications vulnerability4.3 Medium
- projectcalico calico, tigera calico enterprise +1 moreCalico nodes IPv6 traffic redirection from route advertisment6.0 Medium
- dell emc isilon onefs, isilon onefs +1 moreDell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability. The SNMPv2...5.3 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 moreInformation disclosure4.5 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation disclosure in support bundle files2.4 Low
- gitlabAn information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when...6.5 Medium
- redhat 3scaleA vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the...4.6 Medium
floodynpmRemote Memory Exposure in floody5.1 Mediummysqlnpmmysql Node.JS Module Vulnerable to Remote Memory ExposureNo score- elastic kibanaKibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way...9.8 Critical
- keycloak, redhat jboss enterprise application platform +1 morekeycloak-core discloses system properties6.5 Medium
- request project request, hackerone request node module +1 moreRemote Memory Exposure in request5.9 Medium
- webtorrent bittorrent-dht, hackerone bittorrent-dht node module +1 moreRemote Memory Disclosure in bittorrent-dht7.5 High
- ws project ws, hackerone ws node module +1 moreRemote Memory Disclosure in ws7.5 High
- openstack glance, red hat openstack folsom for rhel 6, openstack platform 16.2 +2 more +4 moreOpenstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request6.5 Medium