CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive...5.3 Medium
- shopwareShopware database password is leaked to an unauthenticated users7.5 High
- ibm mq applianceIBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under...3.1 Low
- kubernetesCredential leakage when failing to mount5.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a...6.5 Medium
- journal-theme journalThe Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.7.5 High
- ibm security secret serverIBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information...2.7 Low
- ibm security secret serverIBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information...2.7 Low
- ibm business process manager express, business automation workflow, business process manager +2 moreIBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager...5.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain...2.7 Low
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive...4.3 Medium
- blaauwproducts remote kiln controlInformation disclosure via error message discrepancies in authentication functions in Blaauw...5.3 Medium
- solarwinds netpath, orion platform, network performance monitor +2 moreSolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information...5.5 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information...4.3 Medium
- hcltech connections, hcl software "hcl connections" +1 more"HCL Connections is vulnerable to possible information leakage and could disclose sensitive...6.5 Medium
- divante storefront-api, vue-storefront-api +1 moreDiavante vue-storefront-api and storefront-api disclose stack trace5.3 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error...5.3 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an...4.3 Medium
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose...2.7 Low
- ibm rational quality managerIBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain...4.3 Medium
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...7.5 High
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreIBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain...5.3 Medium
- sensiolabs symfonyExceptions displayed in non-debug configurations in Symfony4.6 Medium
- ibm mq, mq appliance, websphere mq +2 moreIBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local...5.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows...7.5 High
- zammadAn issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages...5.3 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full...5.3 Medium
- smartclientAn issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request...5.3 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain...4.3 Medium
- hitachi automation director, compute systems manager, device manager +2 moreA vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior...4.3 Medium
- sap se business objects business intelligence platform (cmc), sap businessobjects business intelligence platform +1 moreCertain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4...5.3 Medium
- ibm security secret serverIBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user...2.7 Low
- evoko homeEvoko Home 1.31 devices provide different error messages for failed login requests depending on...5.3 Medium
- mfscripts yetishare_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message...5.3 Medium
- red hat tower, redhat ansible tower +1 moreA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when ...5.3 Medium
- sap enable nowSAP Enable Now, before version 1911, leaks information about network configuration in the server...7.5 High
- syliusInternal exception message exposure for login action in Sylius3.5 Low
- miwisoft mijosearchThe Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain...5.3 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreIBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes...3.7 Low
- nicehash minerA Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0...3.1 Low
- google chromeInsufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120...6.5 Medium
- ibm maximo asset management, control desk, maximo for aviation +7 more +9 moreIBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to...5.3 Medium
- jetbrains upsourceServer metadata could be exposed because one of the error messages reflected the whole response...5.3 Medium
- dell bsafe micro-edition-suite, rsa bsafe mes +1 moreRSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and...5.9 Medium
- pydioPydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the...5.3 Medium
- dell rsa archer, rsa archer +1 moreRSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability....6.5 Medium
- micro focus service managerClass and method names in error message in Micro Focus Service Manager product versions 9.30, 9...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...5.3 Medium
- Show moreLoading…