CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connect Multiple Vulnerabilities in IBM API Connect 4.3 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.3 Medium
- apache software foundation juneau Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults 10.0 Critical
- red hat ansible-core A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is... 5.5 Medium
- ibm db2 genius hub Multiple vulnerabilities that affects IBM Db2 Genius Hub 4.3 Medium
- warp-tech warpgate Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller 3.7 Low
- unknown duplicator, duplicator-pro +1 more Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points 5.3 Medium
- red hat build of apache camel 4 for quarkus 3, build of apicurio registry 3, build of debezium 3 +6 more +8 more Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses 5.3 Medium
- octo-sts app Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages 5.3 Medium
- roziscoding jack jack: upstream error responses expose backend and peer credentials 8.4 High
- n8n-io n8n n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data 5.3 Medium
- hcl software bigfix aex HCL BigFix AEX is affected by multiple security vulnerabilities. 6.5 Medium
- a2ui-project a2ui a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure 5.3 Medium
- tanium server Tanium addressed an information disclosure vulnerability in Tanium Server. 4.3 Medium
- a2aproject a2a-java a2aproject a2a-java JSON-RPC Error getMessage information exposure 5.3 Medium
- a2aproject a2a-go a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure 6.9 Medium
- a2aproject a2a-dotnet a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure 5.3 Medium
- apache camel Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions 5.3 Medium
- knime business hub Workflow names may be leaked to unauthenticated users in KNIME Business Hub 6.9 Medium
- webpack-dev-server webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint 5.3 Medium
- a2aproject a2a-rs a2aproject a2a-rs error.rs information exposure 6.9 Medium
- vitejs vite, vite-plus +1 more Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance` 6.3 Medium
- ibm concert IBM Concert Software Information Disclosure 5.3 Medium
- apache camel Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions 5.3 Medium
- apache camel Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions 5.3 Medium
- apache camel Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions 5.3 Medium
- apache camel Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions 5.3 Medium
- gantry 5 framework WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability 7.5 High
- dell terraform provider for ome Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive... 8.6 High
- hitachi ops center administrator Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator 4.3 Medium
- ibm websphere application server - liberty IBM WebSphere Application Server Liberty Information Disclosure 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows NTFS Information Disclosure Vulnerability 4.7 Medium
- siemens .net client library for simatic s7 webserver api A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exc… 6.8 Medium
- No product listed DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input. 9.1 Critical
- ash-project ash typescript Internal error terms inspected into AshTypescript RPC error responses 6.3 Medium
- pyload pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo 5.3 Medium
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 more Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a... 3.7 Low
- parse-community parse-server Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors 6.3 Medium
- gitea Gitea migration and pull mirror SSRF through multi-answer DNS 4.3 Medium
- vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() 5.7 Medium
- No product listed uptrace user_handler.go Login information exposure 6.9 Medium
- hcl software bigfix service management HCL BigFix Service Management is affected by multiple security vulnerabilities. 3.7 Low
- hcl software bigfix service management HCL BigFix Service Management is affected by multiple security vulnerabilities. 5.3 Medium
- hcl software bigfix service management HCL BigFix Service Management is affected by multiple security vulnerabilities. 5.3 Medium
- hcl icontrol HCL iControl is affected by an Improper Error Handling vulnerability 3.1 Low
- jupyterlab JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 5.4 Medium
- stoatchat stoatchat before 0.15.5 Account Enumeration via Error Location 6.9 Medium
- paessler prtg network monitor Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor 7.1 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +2 more +4 more Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplatenode survey min/max validation error me… 7.7 High
- Show olderLoading…