CWE-201: Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- patrick posner simply static, simply static static +1 moreWordPress Simply Static plugin <= 3.1.3 - Sensitive Data Exposure via Log File vulnerability7.5 High
- opentelemetry, open-telemetry opentelemetry-dotnet +1 moreSensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore4.1 Medium
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreInformation disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.17.5 High
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password"...4.3 Medium
- tainacanWordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to theft of hashed password6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal vulnerable to user impersonation5.4 Medium
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability7.7 High
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreSensitive authentication-related value accessible publicly7.5 High
- wp swings coupon referral programWordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure7.5 High
- instipod duouniversalkeycloakauthenticatorAn information disclosure vulnerability exists in the challenge functionality of instipod...4.5 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgery9.1 Critical
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab8.5 High
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab3.7 Low
- softether vpnAn information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4...5.5 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab6.5 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.5 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.0 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.3 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Caller ACL Token's Secret ID is Exposed to Sentinel3.4 Low
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: spotlight server-side share path disclosure5.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.5 Medium
- vaadin, flow flow-server +1 morePossible information disclosure in non visible components5.7 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab3.1 Low
- answer, answerdev answerdev/answer +1 moreInsertion of Sensitive Information Into Sent Data in answerdev/answer7.6 High
- getsentry sentry-python, sentry software development kit +1 moreSentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`7.6 High
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of sensitive information leakage. After...2.7 Low
- bigbluebuttonBigBlueButton vulnerable to Insertion of Sensitive Information Into Sent Data6.5 Medium
- zgr tps200 ng, zigor zgr tps200 ng firmware +1 moreZGR TPS200 NG Information Exposure7.5 High
- linux kernelA vulnerability was found in the Linux kernel, where accessing a deallocated instance in...5.5 Medium
- project calico calico, tigera calico enterprise +1 moreCalico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature5.5 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...5.3 Medium
- sap businessobjects business intelligence platformA CSRF token visible in the URL may possibly lead to information disclosure vulnerability.6.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled6.1 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Unauthorized Information Disclosure Vulnerability5.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreDefault settings leak federated cloud ID to lookup server of all users2.7 Low
- f5 nginx controllerThe NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed...7.8 High
- django-registration project django-registrationPotential sensitive information disclosed in error reports3.7 Low
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreInsertion of sensitive information into sent data vulnerability in synorelayd in Synology...8.3 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Unauthorized Information Disclosure Vulnerability5.5 Medium
- cisco web security appliance (wsa), content security management appliance, email security appliance +1 more +3 moreCisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability5.3 Medium
- cisco jabberCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- Show moreLoading…