CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- yith woocommerce subscription WordPress YITH WooCommerce Subscription plugin <= 4.22.0 - Sensitive Data Exposure vulnerability 5.3 Medium
- hclsoftware bigfix mcm & mobile BigFix Mobile is affected by sensitive information disclosure 6.3 Medium
- flexera flexnet beacon, flexnet manager suite +1 more FlexNet Beacon Missing Authentication Vulnerability 6.9 Medium
- tidewave-ai tidewave Host filesystem path disclosure via DNS rebinding 2.3 Low
- red hat enterprise linux 10, enterprise linux 9 +1 more Goose: goose: shell history and environment leak via terminal integration 7.4 High
- cisco telepresence video communication server (vcs) expressway Cisco Expressway Series Information Disclosure Vulnerability 5.3 Medium
- apache software foundation cocoon Apache Cocoon: Unauthenticated access to diagnostic interfaces 7.5 High
- No product listed Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header 5.3 Medium
- wisdomgarden tronclass WisdomGarden｜Tronclass - Sensitive Data Exposure 5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows ALPC Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft Trace Data Helper Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft Trace Data Helper Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows Kernel Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 more Windows Hello Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 more Windows Shell Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Win32 Kernel Subsystem Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Common Log File System Driver Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Win32 Kernel Subsystem Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 more Windows MIDI Service Module Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Installer Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Kernel Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Kernel Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Cryptographic Services Information Disclosure Vulnerability 5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 more Microsoft Office Excel Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows NTFS Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Secure Kernel Mode Information Disclosure Vulnerability 5.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 more Windows Sysmain Service Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Win32 Kernel Subsystem Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows Clipboard User Service Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more HTTP.sys Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows iSCSI Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Kernel Information Disclosure Vulnerability 5.5 Medium
- otrs ag otrs Unauthenticated Disclosure of Agent Frontend Configuration 5.3 Medium
- yith woocommerce product add-ons WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability 5.3 Medium
- areoi all bootstrap blocks WordPress All Bootstrap Blocks plugin <= 1.3.31 - Sensitive Data Exposure vulnerability 4.3 Medium
- backdropcms backdrop Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration... 7.8 High
- @quasar app-vite, render-ssr-error, quasarframework quasar +2 more Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable 7.1 High
- xserver migrator WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability 7.5 High
- arraytics wp event solution WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability 5.3 Medium
- memberful - membership plugin WordPress Memberful - Membership Plugin plugin <= 1.81.2 - Sensitive Data Exposure vulnerability 4.3 Medium
- ezglobal gpm light ezGlobal｜GPM LIGHT - Sensitive Data Exposure 6.9 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +2 more +4 more Automation-controller: automation-controller: unauthenticated /api/v2/ping/ discloses automation-mesh instance topology and instance-group membership 5.3 Medium
- trustedlogin connector WordPress TrustedLogin Connector plugin <= 2.0.3 - Sensitive Data Exposure vulnerability 5.3 Medium
- ibm qradar IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment. 6.5 Medium
- patriksimek vm2 vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack 6.9 Medium
- carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more Information Disclosure via Schema Path Manipulation 6.5 Medium
- st engineering idirect 3315-series terminals, 9-series terminals, evolution iq‑series terminals +2 more ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere 8.6 High
- cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle.... 4.3 Medium
- Show olderLoading…