CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm security verify governance, identity manager, security verify governance +1 moreIBM Security Verify Governance, Identity Manager information disclosure5.3 Medium
- bradleyfalzon ghinstallationghinstallation returns app JWT in error responses5.0 Medium
- hitachi jp1/automatic operation, jp1\/automatic operation +1 moreInformation Exposure Vulnerability in JP1/Automatic Operation3.3 Low
- google androidIn enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of...3.3 Low
- grafanaGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Medium
- php point of sale point of sale, phppointofsale php point of sale +1 moreUnauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.5.3 Medium
- stimulsoft reportsStimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an...9.8 Critical
- octopus serverIn affected versions of Octopus Server it is possible to reveal the existence of resources in a...5.3 Medium
- solarwinds sql sentrySensitive Data Disclosure Vulnerability5.3 Medium
- getkirby kirbyKirby CMS vulnerable to user enumeration in the brute force protection6.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the...4.3 Medium
- hcl software digital experience, hcltech hcl digital experience +1 moreAn injection vulnerability affects HCL Digital Experience3.1 Low
- ibm maximo asset management, maximo application suite +1 moreIBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive...5.3 Medium
- hitachi raid manager storage replication adapterInformation Exposure Vulnerability in RAID Manager Storage Replication Adapter9.0 Critical
- keycloakIncorrect implementation of lockout feature in Keycloak7.5 High
- ibm sterling file gatewayIBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6...4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive...5.3 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages...4.3 Medium
- dspace"Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization5.3 Medium
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could...4.3 Medium
- cuyz valinorValinor error messages leading to potential data exfiltration7.5 High
- openssh key parser project key parser, scottcwang openssh key parser +1 morePossible leak of key's raw field if declared length is incorrect in openssh_key_parser7.7 High
- dell powerscale onefsDell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information...9.6 Critical
- weave gitops, weaveworks weave-gitops +1 moreWeave GitOps leaked cluster credentials into logs on connection errors9.0 Critical
- typo3Insertion of Sensitive Information into Log File in typo3/cms-core5.3 Medium
- nocodb, nocodb nocodb/nocodb +1 moreGeneration of Error Message Containing Sensitive Information in nocodb/nocodb9.1 Critical
- lightbend play framework, playframework +1 moreDev error stack trace leaking into prod in Play Framework5.9 Medium
- barco control room management suiteBarco Control Room Management Suite web application, which is part of TransForm N before 3.14, is...5.3 Medium
- nextcloud deck, kiteworks security-advisories +1 moreError in deleting deck cards attachment reveals the full application path in Nextcloud Deck3.5 Low
- splunk, splunk enterprise +1 moreError message discloses internal path4.3 Medium
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain...2.7 Low
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0...4.3 Medium
- apache apisixapisix/jwt-auth may leak secrets in error response7.5 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0...4.3 Medium
- gitlabMissing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14...4.8 Medium
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Generation of Error Message Containing Sensitive Information7.5 High
- joomla joomla\!, joomla! project cms, joomla/filesystem +2 more[20220302] - Core - Path Disclosure within filesystem error messages5.3 Medium
- argoproj argo cd, argo-cd +1 morePath traversal allows leaking out-of-bound files from Argo CD repo-server6.8 Medium
- solarwinds web help deskSensitive Data Disclosure Vulnerability5.3 Medium
- dlink dir-x1860 firmwareAn information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote...5.3 Medium
- kernel util-linux, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support....5.5 Medium
- microweber, microweber microweber/microweber +1 moreGeneration of Error Message Containing Sensitive Information in microweber/microweber9.4 Critical
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreGeneration of Error Message Containing Sensitive Information in snipe/snipe-it5.3 Medium
- valmet dnaRemote code execution in Valmet DNA before Collection 20218.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 Medium
- microweber, microweber microweber/microweber +1 moreGeneration of Error Message Containing Sensitive Information in microweber/microweber6.5 Medium
- hitachi linkoneOWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product3.7 Low
- juniper junos, juniper networks junos os +1 moreJunos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in7.3 High
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain...2.7 Low
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreGeneration of Error Message Containing Sensitive Information in livehelperchat/livehelperchat7.3 High
- Show moreLoading…