CWE-204: Observable Response Discrepancy
The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
A kind of CWE-203 Observable Discrepancy.
From the CWE List. © The MITRE Corporation.
Newest
- alfnru password recovery plugin, password recovery project recovery +1 moreUser enumeration vulnerability in Roundcube Password Recovery Plugin5.3 Medium
- mesosoi silverwaregames-io-issue-tracker, silverwaregames +1 moreSilverware Games vulnerable to account enumeration via inconsistent responses5.3 Medium
- suluSulu Observable Response Discrepancy on Admin Login4.3 Medium
- tadiran telecom aeonix, tadirantele aeonix +1 moreTadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy5.3 Medium
- sick ag icr890-4, sick icr890-4 firmware +1 moreObservable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify...5.3 Medium
- moxa tn-5900, tn-5900 series, tn-5900 firmware +2 moreTN-5900 Series User Enumeration Vulnerability5.3 Medium
- avaya ix workforce engagementAvaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy5.3 Medium
- snap one ovrc cloud, snapone orvc +1 moreWhen supplied with a random MAC address, Snap One OvrC cloud servers will return...5.3 Medium
- teltonika remote management systemTeltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows...5.3 Medium
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreObservable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215,...5.3 Medium
- mendix forgot password, siemens mendix forgot password (mendix 7 compatible), mendix forgot password (mendix 8 compatible) +1 more +3 moreA vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions...5.3 Medium
- answer, answerdev answerdev/answer +1 moreObservable Response Discrepancy in answerdev/answer5.3 Medium
- vantage6Observable Response Discrepancy in vantage65.3 Medium
- ghostA user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9...5.3 Medium
- getkirby kirbyKirby CMS vulnerable to user enumeration in the brute force protection6.5 Medium
- getkirby kirbyUser enumeration in the code-based login and password reset forms4.8 Medium
- johnson controls c•cure 9000, johnsoncontrols c-cure 9000 firmware +1 moreCCURE Observable Response Discrepancy4.3 Medium
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreUser enumeration vulnerability in MB connect line and Helmholz products5.3 Medium
- codesys visualizationCODESYS Visualization vulnerable to user enumeration5.3 Medium
- suse manager server, manager server 4.1, manager server 4.2 +2 moreSUMA user enumeration via weak error message5.3 Medium
- qlik sense, qlik sense enterprise on windows +1 moreQlik Sense Enterprise Domain User enumeration5.3 Medium
- linuxfoundation harborUnauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)5.3 Medium
- dpgaspar flask-appbuilderObservable Response Discrepancy in Flask-AppBuilder5.3 Medium
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker...7.5 High
- mb connect line mbconnect24, mymbconnect24 +1 moreRemote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.07.5 High
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router6.5 Medium
- pimcoreObservable Response Discrepancy in Lost Password Service5.3 Medium
- typo3, typo3 cms +1 moreObservable Response Discrepancy in TYPO3 CMS3.7 Low
- accellion ftp serverThe Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.5.3 Medium