CWE-214: Invocation of Process Using Visible Sensitive Information
A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.
A kind of CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- checkmk gmbh checkmk Jolokia special agent exposes password in process list 2.0 Low
- checkmk gmbh checkmk NetApp ONTAP special agent exposes password in process list 2.0 Low
- nvm-sh nvm nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line 2.0 Low
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: Server passwords are left in pgAdmin's process environment 7.0 High
- aws amazon-kinesis-producer Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java 8.2 High
- red hat data grid 8 Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store 6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments 5.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments 5.0 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 more Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool 4.7 Medium
- canonical ubuntu pro for wsl wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments 5.7 Medium
- superradcompany microsandbox microsandbox: Secret values exposed in world-readable process arguments 6.5 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 more Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments 5.5 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 more Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list 5.0 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 more Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments 5.0 Medium
- jahlives openssl encrypt openssl_encrypt before 1.4.9 Information Disclosure via Command Line 6.9 Medium
- red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 more Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings 5.5 Medium
- nvidia nemoclaw NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process... 5.5 Medium
- black duck blackduck-c-cpp Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17... 7.1 High
- tubitak bilgem software technologies research institute eta-otp-lock Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lock 5.0 Medium
- gitpython-developers gitpython GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add() 8.7 High
- tanium connect Tanium addressed an information disclosure vulnerability in Connect. 4.4 Medium
- canonical ubuntu 14.04 lts, ubuntu 16.04 lts, ubuntu 18.04 lts +5 more +7 more ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line 5.5 Medium
- tubitak bilgem software technologies research institute pardus domain joiner Sensitive Data Exposure in TUBITAK BILGEM's Pardus Domain Joiner 7.9 High
- mervinpraison praisonai PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution 5.5 Medium
- openclaw OpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox Backends 2.0 Low
- jahlives openssl encrypt openssl_encrypt before 1.4.0 Password Exposure via CLI Argument 8.7 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more NATS credentials are exposed in monitoring port via command-line argv 7.4 High
- coollabs coolify Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current}/members` API endpoint 5.7 Medium
- axis os A malicious ACAP application can gain access to admin-level service account credentials used by... 6.6 Medium
- f5 f5os-a, f5os - appliance +1 more F5OS-A FIPS HSM vulnerability 5.6 Medium
- bmc control-m, control-m/server, control-m\/server +2 more BMC Control-M/Server cleartext database credentials in process lists and logs 4.8 Medium
- ibm mq operator, supplied mq advanced container images +1 more IBM MQ Operator information disclosure 6.0 Medium
- arctera ediscovery platform Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used,... 6.0 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 more IBM QRadar Suite Software information disclosure 5.6 Medium
- kisaragieffective toy-blog toy-blog administrative token leaked through the command line parameter 4.7 Medium
- gradio-app gradio-app/gradio, gradio project gradio +1 more Secrets Exfiltration in gradio-app/gradio 7.1 High
- checkmk Information disclosure in mk_oracle Checkmk agent plugin 3.8 Low
- cloudlinux cagefs CloudLinux CageFS 7.1.1-1 or below passes the authentication token as command line argument. In... 7.8 High
- veracode Veracode Scan Jenkins Plugin vulnerable to information disclosure 5.5 Medium
- red hat undertow, netapp cloud secure agent, oncommand insight +3 more +5 more Undertow vulnerable to Denial of Service (DoS) attacks 7.5 High
- github codeql action, codeql-action +1 more CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated 4.4 Medium
- cloud foundry bosh system metrics server UAA password may appear in BOSH System Metrics Server process arguments 6.5 Medium
- red hat ansible, redhat ansible engine, debian linux +2 more +4 more Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible 5.0 Medium
- red hat tower, redhat ansible tower +1 more When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed... 7.2 High
- suse repository mirroring tool, yast2-rmt +1 more yast2-rmt leaks database passwords in process list 3.4 Low
- [unknown] ansible, debian linux, redhat ansible engine +2 more +4 more Ansible Leaks Data Passed to ssh-keygen 7.8 High