CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- showdoc, star7th star7th/showdoc +1 moreGeneration of Error Message Containing Sensitive Information in star7th/showdoc5.3 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreGeneration of Error Message Containing Sensitive Information in livehelperchat/livehelperchat4.3 Medium
- reprisesoftware reprise license managerAn issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...6.5 Medium
- ibm security guardium key lifecycle manager, security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0,...2.7 Low
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain...5.3 Medium
- cisco umbrella, umbrella insights virtual appliance +1 moreCisco Umbrella Email Enumeration Vulnerability4.3 Medium
- red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 moreAnsible discloses sensitive information in traceback error message5.5 Medium
- openwaygroup way4/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to...5.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain...4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain...4.3 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 could reveal sensitive version information about the server from error pages that...4.3 Medium
- ibm security guardiumIBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a...2.7 Low
- cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +10 more +12 moreCisco SD-WAN Software Information Disclosure Vulnerability5.5 Medium
- ibm security secret serverIBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive...2.7 Low
- redaxoTriggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows...6.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Text app can disclose existence of folders in "File Drop" link share5.3 Medium
- owncloudThe public share controller in the ownCloud server before version 10.8.0 allows a remote attacker...5.3 Medium
- apache ofbiz, ofbiz-framework +1 moreGeneration of Error Message Containing Sensitive Information in Apache OFBiz6.5 Medium
- gitlabA verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private...4.3 Medium
- sapphireimsIn SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software...7.5 High
- ibm i2 analyzeIBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive...4.3 Medium
- ibm i2 analyst's notebook premium, i2 analysts notebook +1 moreIBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain...5.3 Medium
- ibm i2 analyzeIBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote...5.3 Medium
- ibm i2 analyzeIBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote...5.3 Medium
- ucms project ucmsUCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the...5.3 Medium
- combodo itopAny user can see any fields (including mailbox password) with GroupBy Dashlet7.7 High
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreGeneration of Error Message Containing Sensitive Information in Elasticsearch6.5 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive...2.7 Low
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive...2.7 Low
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information...4.3 Medium
- siemens teamcenter active workspace v4, teamcenter active workspace v5.0, teamcenter active workspace v5.1 +1 more +3 moreA vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9),...5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreFile path disclosure of shared files in Nextcloud Text application3.1 Low
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive...4.3 Medium
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive...4.3 Medium
- shopwareInformation leakage in Error Handler5.3 Medium
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability.5.3 Medium
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due...5.3 Medium
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a...6.5 Medium
- checkpoint ssl network extenderSSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the...5.3 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain...4.3 Medium
- ibm security guardiumIBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a...5.3 Medium
shopware/shopwarePackagistInformation leakage in Error HandlerNo score- ibm security identity managerIBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information...5.3 Medium
- ibm security identity managerIBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information...5.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages5.3 Medium
- ibm qradar user behavior analytics, qradar siem +1 moreIBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain...5.3 Medium
- iliasAn information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote...6.5 Medium
- argo cd cd, argoproj argo cd +1 moreArgo CD leaked secret data into error messages and logs on invalid edits via UI5.9 Medium
- dhcms project dhcmsAn Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid...5.3 Medium
- Show moreLoading…