CWE-204: Observable Response Discrepancy
The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
A kind of CWE-203 Observable Discrepancy.
From the CWE List. © The MITRE Corporation.
Newest
- celk saudeUser Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1...5.3 Medium
- dpgaspar flask-appbuilderObservable Response Discrepancy in flask-appbuilder3.7 Low
- q-free maxtimeA CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or...5.3 Medium
- sap se netweaver server abap, sap basis +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP5.3 Medium
- pimcore admin-ui-classic-bundle, admin classic bundle +1 morePimcore Admin Classic Bundle allows user enumeration6.9 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway information disclosure4.3 Medium
- ibm control centerIBM Control Center information disclosure5.3 Medium
- aws sign-in iam login flowIssue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration6.9 Medium
- azukaar cosmos-serverCosmos userbase checking vulnerability6.9 Medium
- fortinet forticlientems, fortisoar +1 moreAn observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through...4.9 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by username enumeration vulnerability3.7 Low
- langhsu mblog blog system, mtons mblog +1 morelanghsu Mblog Blog System login observable response discrepancy6.3 Medium
- antabot white-jotterAntabot White-Jotter login observable response discrepancy6.3 Medium
- funnyzpc mee-adminfunnyzpc Mee-Admin Login login observable response discrepancy6.3 Medium
- cisco enterprise chat and emailCisco Enterprise Chat and Email Username Enumeration Vulnerability5.3 Medium
- humhubUser enumeration in HubHub6.9 Medium
- gotenna atak plugin, pro atak plugin +1 moregoTenna Pro ATAK Plugin Observable Response Discrepancy5.3 Medium
- emlog pro, gotenna pro app +1 moreObservable Response Discrepancy in goTenna Pro5.3 Medium
- netcat, netcat cms, content management system +2 moreNetcat CMS: user enumeration6.9 Medium
- acquia mauticUsers enumeration - weak password login4.3 Medium
- ordat foss-online, ordat.erp +1 moreUser enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine...5.3 Medium
- siemens mendix, mendix runtime v10, mendix runtime v10.12 +3 more +5 moreA vulnerability has been identified in Mendix Runtime V10 (All versions < V10.14.0 only if the...6.9 Medium
- loway queuemetricsLoway - CWE-204: Observable Response Discrepancy5.3 Medium
- djangoproject djangoDjango allows enumeration of user e-mail addresses5.3 Medium
- matrix tafnit v8, matrix-globalservices tafnit +1 moreMatrix Tafnit v8 - CWE-204: Observable Response Discrepancy5.3 Medium
- busykoala fastapi-opaOpaMiddleware does not filter HTTP OPTIONS requests5.8 Medium
- spomky-labs webauthn framwork, web-auth webauthn-framework +1 moreEnumeration of valid usernames in web-auth/webauthn-lib5.3 Medium
- ibm security qradar edrIBM Security ReaQta information disclosure5.3 Medium
- kaitenKaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request,...5.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure of user names5.3 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender information disclosure5.3 Medium
- nasirkhan laravel starternasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy6.3 Medium
- ibm db2 for i, i +1 moreIBM i information disclosure3.3 Low
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of...5.3 Medium
- ibm aspera orchestratorIBM Aspera Orchestrator information disclosure5.3 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.3 Medium
- icewhale casaos-userserviceUsername Enumeration in CasaOS via bypass of CVE-2024-247666.2 Medium
- umbraco umbraco-cms, cms +1 moreUmbraco possible user enumeration vulnerability3.7 Low
- alma blog, devklan alma blog +1 moreObservable Response Discrepancy at Alma Devklan Blog5.3 Medium
- surya2developer hostel management service, hostel management system +1 moreSurya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy3.7 Low
- ibm ds8900f, ds8900f firmware +1 moreIBM DS8900F information disclosure6.5 Medium
- icewhale casaos-userserviceCasaOS Username Enumeration6.2 Medium
- ibm cics tx advanced, cics tx +1 moreIBM CICS TX information disclosure5.3 Medium
- ibm common licensingIBM Common Licensing information disclosure4.0 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal allows attackers to discover the existence of sites5.3 Medium
- gallagher command centre, command centre server +1 moreAn observable response discrepancy in the Gallagher Command Centre RESTAPI allows an...4.3 Medium
- elenos etg150 fm, etg150 firmware +1 moreAn issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user...5.3 Medium
- fujitsu arconte áurea, arconte aurea +1 moreUser enumeration vulnerability in Fujitsu Arconte Áurea5.3 Medium
- piccolo-orm piccoloPiccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration5.3 Medium
- Show moreLoading…