CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- mendix database replicationA vulnerability has been identified in Mendix Database Replication (All versions < V7.0.1)....4.3 Medium
- mendix excel importer, siemens mendix excel importer module +1 moreA vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3)....4.3 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when...4.3 Medium
- debian linux, rails https://github.com/rails/rails, rubyonrails actionpack page-caching +1 more +3 moreAction Pack contains Information Disclosure / Unintended Method Execution vulnerability7.5 High
- creharmony node-etsy-clientApiKey secret could be revelated on network issue8.1 High
- django-registration project django-registrationPotential sensitive information disclosed in error reports3.7 Low
- red hat resteasy, netapp oncommand insight, oracle communications cloud native core console +1 more +3 moreExposure of class information in RESTEasy5.3 Medium
- gitlabAn issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error...4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a...3.5 Low
- micro focus solutions business managerinformation disclosure3.5 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 Medium
- postgresql, redhat enterprise linux, software collections +2 moreGeneration of Error Message Containing Sensitive Information in postgresql4.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain...2.7 Low
- keycloak, redhat jboss fuse, openshift application runtimes +1 more +3 moreGeneration of Error Message Containing Sensitive Information in Keycloak2.7 Low
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain...5.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive...5.3 Medium
- combodo itopSQL query displayed on portal error4.3 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a...4.3 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a...4.3 Medium
- ibm emptoris contract management, emptoris spend analysis +1 moreIBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could...5.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2,...5.3 Medium
- qnap qesSensitive information via generation of error messages vulnerability in QES2.3 Low
- hcl dominoHCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due...5.3 Medium
- ibm security secret serverIBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information...2.7 Low
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain...2.7 Low
- hashicorp vaultEnumeration of users in HashiCorp Vault5.3 Medium
- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a...5.3 Medium
- canonical aptdaemon, ubuntu linux +1 moreAptdaemon error messages disclosed file existence to unprivileged users via dbus properties3.8 Low
- red hat wildflyWildfly logs plaintext passwords5.3 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker...4.3 Medium
- ibm i2 ibaseIBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed...3.3 Low
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure...4.4 Medium
- ibm security directory serverIBM Security Directory Server 6.4.0 generates an error message that includes sensitive...5.3 Medium
- siemens desigo insightA vulnerability has been identified in Desigo Insight (All versions). Some error messages in the...4.3 Medium
- trendmicro antivirus, trend micro antivirus for mac (consumer) +1 moreTrend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension...6.0 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized...2.9 Low
- packagekit, canonical ubuntu linux +1 morePackageKit error messages leak presence and mimetype of files to unprivileged users3.3 Low
- redhat resteasy, quarkus, red hat resteasy-client +2 moreGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Medium
- elkarbackupA Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker...7.5 High
- gfi software helpdeskThe vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this...4.3 Medium
type-graphqlnpmInformation Exposure in type-graphqlNo score- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes...2.7 Low
- mozilla firefox, firefox for android, firefox mobile +2 moreWhen trying to load a non-video in an audio/video context the exact status code (200, 302, 404,...6.5 Medium
- suluReset Password / Login vulnerability in Sulu5.3 Medium
- red hat ansible towerA data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return...5.8 Medium
- ui unifi protect, unifi protect for unifi cloud key gen2 plus +1 moreAn information exposure vulnerability exists in UniFi Protect v1.13.3 and prior that allowed...5.3 Medium
- auth0 auth0.js, node-auth0 +1 moreAuthorization header is not sanitized in an error object in auth07.7 High
- Show moreLoading…