CWE-402: Resource Leak
The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.
Also known as Transmission of Private Resources into a New Sphere.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- aiven myhoard Myhoard logs backup encryption key in plain text 7.1 High
- kerlink keros Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly... 5.3 Medium
- tryton trytond trytond allows remote attackers to obtain sensitive trace-back (server setup) information 4.3 Medium
- stardict The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and... 4.7 Medium
- plesk obsidian In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS... 5.8 Medium
- onelogin active directory connector In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the... 5.0 Medium
- codingjoe django-select2 Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking 8.2 High
- zammad In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see... 4.2 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki allows unregistered users to access private pages information through REST endpoint 8.7 High
- craftercms Transmission of Private Resources into a New Sphere in Crafter Engine 6.9 Medium
- ruijie reyee os Ruijie Reyee OS Resource Leak 7.1 High
- electron packager, electron-packager project electron-packager +1 more @electron/packager's build process memory potentially leaked into final executable 7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +5 more +7 more Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation 6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 more Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline. 5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 more Kernel: refcount leak in ctnetlink_create_conntrack() 5.5 Medium
- red hat openstack platform 13.0 (queens) for rhel 7.6 eus, openstack platform 13.0 - els, redhat openstack platform +2 more Instack-undercloud: rsync leaks information to undercloud 7.5 High
- debian linux, linux kernel, fedora +5 more +7 more Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c 5.5 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki Platform's obfuscated email addresses should not be sorted 4.3 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki Platform may retrieve email addresses of all users 7.5 High
- siemens sicam gridedge (classic), sicam gridedge essential +1 more A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6),... 6.9 Medium
- crafter software cms, craftercms crafter cms +1 more Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search 8.1 High
- crafter software cms, craftercms crafter cms +1 more Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine 5.9 Medium
- codegearthemes designer Project sources exposure in Vaadin Designer 8.6 High
- flow flow-server, vaadin flow, vaadin +2 more Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19 8.6 High
-
com.vaadin:vaadin-bomMaven Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19 8.6 High - elastic elasticsearch x-pack security, x-pack +1 more Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the... 6.5 Medium