CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- daloradius, lirantal lirantal/daloradius +1 moreMissing Authorization in lirantal/daloradius5.3 Medium
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation information disclosure5.3 Medium
- redhat openshiftA credentials leak was found in the OpenShift Container Platform. The private key for the...6.5 Medium
- redhat advanced cluster securityA flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were...8.8 High
- cisco email security appliance (esa), email security appliance, secure email and web manager +2 moreCisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability7.7 High
- dalek-cryptography ed25519-dalek`ed25519-dalek` Double Public Key Signing Function Oracle Attack5.9 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Information Disclosure Vulnerability4.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields8.4 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service6.5 Medium
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +14 more +16 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- cisco webex meetingsCisco Webex Meetings Client Software Logging Information Disclosure Vulnerability5.5 Medium
- argo cd cd, argoproj argo cd +1 moreArgo CD leaked secret data into error messages and logs on invalid edits via UI5.9 Medium
- cisco sd-wan vmanageCisco SD-WAN vManage Information Disclosure Vulnerability5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.7.3 High
- cisco sd-wan vmanageCisco SD-WAN vManage Information Disclosure Vulnerability5.5 Medium
- gehealthcare 1.5t brivo mr355 firmware, 3.0t signa hd 16 firmware, 3.0t signa hd 23 firmware +109 more +111 moreGE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during...9.8 Critical
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Information Disclosure Vulnerability5.3 Medium
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its...5.3 Medium