CWE-213: Exposure of Sensitive Information Due to Incompatible Policies
The product's intended functionality exposes information to certain actors in accordance with the developer's security policy, but this information is regarded as sensitive according to the intended security policies of other stakeholders such as the product's administrator, users, or others whose information is being processed.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- ami aptiov Uncleared Password Keystrokes Vulnerability 5.8 Medium
- gitroomhq postiz-app Channel tokens and organization API key exposed in API responses 5.3 Medium
- graylog2 graylog2-server Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields 5.0 Medium
- hclsoftware connections HCL Connections is vulnerable to information disclosure 3.5 Low
- nomysoft informatics nomysem Improper Access Control in Nomysoft Informatics' Nomysem 6.5 Medium
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more NATS has MQTT plaintext password disclosure 8.6 High
- hclsoftware connections HCL Connections is vulnerable to information disclosure 3.5 Low
- apache airflow Apache Airflow: Connection sensitive details exposed to users with READ permissions 6.5 Medium
- ibm concert, concert software +1 more IBM Concert Software information disclosure 3.7 Low
- gitlab Exposure of Sensitive Information Due to Incompatible Policies in GitLab 4.3 Medium
- backstage Permission policy information leakage in Backstage permission system 4.3 Medium
- dario health application database and internet-based server infrastructure Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies 6.9 Medium
- ibm concert, concert software +1 more IBM Concert information disclosure 5.3 Medium
- gitlab Exposure of Sensitive Information Due to Incompatible Policies in GitLab 3.7 Low
- gitlab Exposure of Sensitive Information Due to Incompatible Policies in GitLab 6.6 Medium
- sap se s/4 hana (statutory reports) Information Disclosure in SAP S/4 HANA (Statutory Reports) 4.3 Medium
- nask ezd rp Internal infrastructure data leak in EZD RP 7.1 High
- mia technology mia-med Seeing the SMS Verification Code in Mia Technology's Mia-Med 7.5 High
- datasette Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users 5.3 Medium
- sap enable now Information Disclosure in SAP Enable Now 5.3 Medium
- siemens simotion c240, simotion c240 pn, simotion d410-2 dp +22 more +24 more A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION... 4.6 Medium
- avanquest pdfescape Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak /... 7.5 High
- google android, samsung mobile devices +1 more Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local... 4.0 Medium
- google android, samsung mobile devices +1 more Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows... 4.0 Medium
- google android, samsung mobile devices +1 more Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local... 4.0 Medium
- google android, samsung mobile devices +1 more Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows... 4.0 Medium
- google android, samsung mobile devices +1 more Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local... 1.9 Low
- google android, samsung mobile devices +1 more Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local... 1.9 Low
- google android, samsung mobile devices +1 more Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1... 2.2 Low
- sap businessobjects business intelligence platform SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate... 6.5 Medium
- sylius Exposure of Sensitive Information Due to Incompatible Policies in Sylius 5.0 Medium
- juniper networks junos space, opennms +1 more Junos Space: OpenNMS is accessible via port 9443 5.6 Medium
- centire yopify Centire Yopify leaks customer information 5.3 Medium
- univention corporate server, univention corporate server univention-directory-notifier +1 more Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by:... 7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 more Installation information leak in Eclipse Jetty 5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 more Information Exposure vulnerability in Eclipse Jetty 5.3 Medium