CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab5.3 Medium
- hitachi energy nsd570 teleprotection equipmentA vulnerability exists in NSD570 that allows any authenticated user to access all device logs...4.3 Medium
- ibm powervm hypervisorIBM PowerVM Hypervisor information disclosure5.1 Medium
- rakuten turbo 5g firmware, rakuten mobile, inc. turbo 5g +1 moreExposure of sensitive system information to an unauthorized control sphere issue exists in...5.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure4.3 Medium
- containerbuildsystem cachi2cachi2 allows traceback prints locals4.7 Medium
- cisco catalyst sd-wan managerCisco SD-WAN vManage Information Disclosure Vulnerabilities5.3 Medium
- suse manager server 5.0Database password leaked by systemd uyuni-server-attestation service5.7 Medium
- fortinet fortiwebAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...3.8 Low
- softbank corp. mesh wi-fi router rp562bExposure of sensitive system information to an unauthorized control sphere issue exists in Mesh...3.5 Low
- stacks mobile app builder, stacksmarket stacks mobile app builder +1 moreWordPress Stacks Mobile App Builder plugin <= 5.2.3 - Sensitive Data Exposure vulnerability7.5 High
- roland murg wp booking systemWordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability6.5 Medium
- fahad mahmood keep backup dailyWordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability7.5 High
- teplitsa of social technologies leykaWordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability5.3 Medium
- palo alto networks cortex xsoarCortex XSOAR: Information Disclosure Vulnerability5.3 Medium
- open source opentofuOpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation8.7 High
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab4.3 Medium
- palo alto networks globalprotect app, pan-os, paloaltonetworks globalprotect +2 more +4 morePAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes6.9 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition information disclosure3.1 Low
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure4.3 Medium
- siemens ruggedcom rmc30, ruggedcom rmc30nc, ruggedcom rp110 +49 more +51 moreA vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM...8.7 High
- ethyca fidesFides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL5.3 Medium
- admiror-design-studio admirorframesFull Path Disclosure in AdmirorFrames Joomla! Extension6.3 Medium
- canonical ubuntu advantage desktop daemon, ubuntu advantage desktop pro +1 moreMarco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks...5.9 Medium
- canonical netplannetplan leaks the private key of wireguard to local users. A security fix will be released soon.6.5 Medium
- abb 2tma310010b0001 firmware, 2tma310010b0003 firmware, 2tma310011b0001 firmware +14 more +16 moreFDSK Leak in KNX Secure Devices7.3 High
- No product listedtine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain...7.5 High
- fortinet fortiadcAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...5.2 Medium
- analytify - google analytics dashboard, hiddenpearls analytify – google analytics dashboard for wordpress (ga4 analytics tracking) +1 moreAnalytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Missing Authorization5.4 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure7.5 High
- aenrich a+hrd, a\+hrd +1 moreaEnrich Technology a+HRD - Exposure of Sensitive Data5.3 Medium
- lenovo xclarity administratorA valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an...6.5 Medium
- red hat openshift virtualization 4Cnv: information disclosure through the usage of vm-dump-metrics4.3 Medium
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation information disclosure5.3 Medium
- google androidIn getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's...3.3 Low
- alf, alfio-event alf.io +1 moreIDOR make user can read e-mail log sent by other events7.2 High
- drupal, drupal core +1 moreDrupal core Denial of Service vulnerability5.3 Medium
- lenovo tab m8 hd tb8505f firmware, tab m8 hd tb8505fs firmware, tab m8 hd tb8505x firmware +2 more +4 moreAn information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a...3.3 Low
- sap gui connector, sap se microsoft edge browser extension (sap gui connector for microsoft edge) +1 moreInformation Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)7.4 High
- sap netweaver, sap se netweaver (internet communication manager) +1 moreInformation Disclosure vulnerability in SAP NetWeaver Internet Communication Manager4.1 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform5.3 Medium
- easyuse mailhunter ultimateExposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter Ultimate5.0 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 more +3 morePlatform: ec2_key module prints out the private key directly to the standard output7.3 High
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...6.5 Medium
- sap business one, sap se business one (service layer) +1 moreSecurity misconfiguration vulnerability in SAP Business One (Service Layer)5.3 Medium
- mongodb inc. ops manager, mongodb ops manager server +1 moreMongoDB Ops Manager may disclose sensitive information in Diagnostic Archive3.1 Low
- knime business hubSensitive information disclosure in KNIME Hub Web Application5.3 Medium
- canonical landscapeLandscape's Apache server-status is accessible by default9.3 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Exposure of Sensitive Information Vulnerability4.1 Medium
- dell alienware update, update, command update +1 more +3 moreDell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure...6.6 Medium
- Show moreLoading…