CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm mqIBM MQ information disclosure6.2 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.3 Medium
- dave kiss vimeographyWordPress Vimeography plugin <= 2.4.4 - Full Path Disclosure (FPD) vulnerability5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.3 Medium
- apache supersetApache Superset: Error verbosity exposes metadata in analytics databases5.3 Medium
- phpmyfaqphpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available8.6 High
- getsentry sentrySentry's improper error handling leaks Application Integration Client Secret5.3 Medium
- moodleMoodle: users' names returned in messaging error message4.3 Medium
- calibre-web project calibre-web, janeczku janeczku/calibre-web +1 moreInformation Disclosure in janeczku/calibre-web4.3 Medium
- extremenetworks extremeosThe BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not...No score
- hcl software bigfix complianceHCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information4.7 Medium
- humhubUser enumeration in HubHub6.9 Medium
- 63moons wave 2.0, aero +1 moreImproper Error Handling Vulnerability in Wave 2.07.1 High
- ollamaAn issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api...7.5 High
- posti shippingWordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability5.3 Medium
- hcl sametimeHCL Sametime is impacted by generation of error messages containing sensitive information3.6 Low
- solarwinds kiwi cattoolsSolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability5.1 Medium
- webmin userminA discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows...5.3 Medium
- jenkinsJenkins exposes multi-line secrets through error messages4.3 Medium
- peepso community by peepso, peepso, peepso community by peepso – download from peepso.com +2 moreCommunity by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure5.3 Medium
- xenx86: Deadlock in vlapic_error()7.3 High
- apache druidApache Druid: Padding oracle in druid-pac4j extension that allows an attacker to manipulate a pac4j session cookie via Padding Oracle Attack5.3 Medium
- coffee2code custom post limitsCustom Post Limits <= 4.4.1 - Unauthenticated Full Path Disclosure5.3 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab4.5 Medium
- erjemin roll cmserjemin roll_cms views.py information exposure5.1 Medium
- coffee2code remember me controlsRemember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure5.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure5.3 Medium
- ckanCKAN may leak Solr credentials via error message in package_search action5.3 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information4.3 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.3 Medium
- bitdefender gravityzone, gravityzone update server +1 moreVerbose error handling issue in GravityZone Update Server proxy service9.2 Critical
- akana api platform, perforce akana api +1 moreOverly Verbose Errors in SAML Integration3.5 Low
- canonical jujuJuju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm8.8 High
- connectivity standards alliance connectedhomeip, csa-iot matter +1 moreIn-Fabric Matter Cluster Attribute Disclosure3.5 Low
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager information disclosure4.0 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure5.4 Medium
- mozilla firefox, thunderbird +1 moreIncorrect listing of stack frames5.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- ibm mqIBM MQ information disclosure6.5 Medium
- ibm mqIBM MQ information disclosure6.5 Medium
- jenkins structs, jenkins project structs plugin +1 moreExposure of secrets through system log in Jenkins Structs Plugin3.1 Low
- idopesok zsazsa Generates Error Messages Containing Sensitive Information4.0 Medium
- argoproj argo cd, argo-cd +1 moreArgo CD allows authenticated users to enumerate clusters by name4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed5.3 Medium
silverstripe/frameworkPackagistsilverstripe/framework may disclose database credentials during connection failure6.5 Medium- facebookgithub.com/huandu/facebook may expose access_token in error message3.7 Low
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The server does not properly handle application...5.3 Medium
- linux, linux kernel +1 moreASoC: SOF: Fix DSP oops stack dump output contents5.5 Medium
- Show moreLoading…