CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- phpjabbers make an offer widgetUser enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during...9.8 Critical
- phpjabbers ticket support scriptUser enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during...9.8 Critical
- phpjabbers event booking calendarUser enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during...9.8 Critical
- phpjabbers car rental scriptUser enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during...9.8 Critical
- phpjabbers taxi booking scriptUser enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during...9.8 Critical
- phpjabbers fundraising scriptUser enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during...9.8 Critical
- phpjabbers yacht listing scriptUser enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during...9.8 Critical
- phpjabbers hotel booking systemUser enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during...9.8 Critical
- phpjabbers restaurant booking scriptUser enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during...9.8 Critical
- phpjabbers document creatorUser enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password...9.8 Critical
- phpjabbers food delivery scriptUser enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during...9.8 Critical
- e-excellence u-office forcee-Excellence U-Office Force - Error Message Leakage5.3 Medium
- netflix dispatchDispatch writes JWT tokens in error message9.1 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics information disclosure5.3 Medium
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin information disclosure vulnerability4.3 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab3.1 Low
- brocade fabric os, broadcom fabric operating system +1 moreMultiple commands print sensitive information in the terminal5.5 Medium
- ibm tririga application platformIBM TRIRIGA information disclosure4.3 Medium
- debian linux, amd 2nd gen amd epyc™ processors, 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +76 more +78 moreModerate: linux-firmware security update5.5 Medium
- honeywell direct station, engineering station, experion server +1 more +3 moreServer Data type confusion - info leak7.5 High
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab5.3 Medium
- oauth2-server project oauth2-serverleague/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase8.2 High
- misp-project mispMISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can...7.5 High
- dpgaspar flask-appbuilderFlask-AppBuilder vulnerable to possible disclosure of sensitive information on user error2.7 Low
- jetbrains ktorIn JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the...3.3 Low
- xibosignage xibo, xibo-cms +1 moreSensitive Information Disclosure abusing Stack Trace in Xibo CMS4.3 Medium
- ibm mqIBM MQ information disclosure6.2 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to discover network details via error message5.3 Medium
- google androidIn registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted...5.5 Medium
- clickhouse java librariesClickHouse Client Certificate Password Exposure8.8 High
- opcfoundation ua-.netstandardExposure of Sensitive Information in OPC UA .NET Standard Reference Server5.3 Medium
- ibm maximo asset managementIBM Maximo Asset Management information disclosure5.3 Medium
- serenity serene, startsharp +1 moreUser account enumeration in Serenity5.3 Medium
- solarwinds database performance analyzerNo Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.17.5 High
- authzed spicedbSpiceDB binding metrics port to untrusted networks and can leak command-line flags8.7 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information4.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information4.3 Medium
- getsentry sentry-python, sentry software development kit +1 moreSentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`7.6 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager information disclosure4.3 Medium
- apache airflowInformation disclosure in Apache Airflow5.3 Medium
- readtomyshoe project readtomyshoeReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an…7.4 High
- saleorSaleor is vulnerable to unauthenticated information disclosure via Python exceptions3.7 Low
- saleorSaleor is vulnerable to staff-authenticated error message information disclosure vulnerability via Python exceptions6.5 Medium
- ibm financial transaction managerIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7...4.3 Medium
- apache software foundation airflow aws provider, apache apache-airflow-providers-amazon +1 moreApache Airflow AWS Provider: Arbitrary file read via AWS provider7.5 High
- sonicwall email securitySonicWall Email Security contains a vulnerability that could permit a remote unauthenticated...5.3 Medium
- dell wyse management suiteWyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A...5.3 Medium
- alotcer ar7088h-a, alotceriot ar7088h-a firmware +1 moreAlotcer - AR7088H-A Information disclosure5.3 Medium
- pghero project pgheroPgHero Allows Information Disclosure Through EXPLAIN Feature7.5 High
- sumocoders frameworkuserbundlesumocoders FrameworkUserBundle login.html.twig information exposure3.5 Low
- Show moreLoading…