CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- nootheme jobmonsterWordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability5.3 Medium
- infinitt healthcare pacs system managerINFINITT Healthcare INFINITT PACS Exposure of Sensitive System Information to an Unauthorized Control Sphere8.7 High
- provesource ltd social proofWordPress ProveSource Social Proof plugin <= 3.1.2 - Sensitive Data Exposure vulnerability5.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure2.7 Low
- nordicmade savoyWordPress Savoy Theme <= 3.0.8 - Sensitive Data Exposure Vulnerability5.3 Medium
- nvidia gpu display driversNVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an...3.3 Low
- nvidia gpu display driversNVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access...3.3 Low
- sandboxie-plus sandboxieSandboxie exposes encrypted sandbox key during password change6.9 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...5.3 Medium
- hewlett packard enterprise hpe autopass license server, hpe autopass license server +1 moreAn information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.7.5 High
- red hat ansible automation platform 2, redhat ansible automation platform +1 moreAap: aap-gateway: automation-hub: sensitive information disclosure3.5 Low
- broadcom brocade sannav, brocade sannav +1 moreCleartext storage of sensitive information in Brocade SANnav server audit logs.5.1 Medium
- broadcom brocade sannav, brocade sannav +1 morePlaintext security passwords are logged in the audit logs while executing openssl cmd5.1 Medium
- parse-community parse-serverParse Server exposes the data schema via GraphQL API5.3 Medium
- mautic docker mauticExposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images5.3 Medium
- ibm openpagesIBM OpenPages information disclosure4.3 Medium
- ibm openpages with watsonIBM OpenPages with Watson information disclosure4.3 Medium
- nokia single ranThe Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network3.3 Low
- roland beaussant audio editor & recorderWordPress Audio Editor & Recorder plugin <= 2.2.3 - Sensitive Data Exposure Vulnerability5.3 Medium
- hunt electronic hbf-09kd, hbf-16nk +1 moreHunt Electronic Hybrid DVR - Exposure of Sensitive System Information9.8 Critical
- umbraco cms, umbraco-cms +1 moreUmbraco.Cms Vulnerable to Disclosure of Configured Password Requirements5.3 Medium
- redhat keycloak, red hat build of keycloak +1 moreKeycloak-core: keycloak environment information2.7 Low
- metagauss profilegridWordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability4.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Traffic Information Disclosure Vulnerability6.0 Medium
- amd versal adaptive soc devices, alveo v80 compute accelerator, platform loader and manager (plm) +6 more +8 moreIn AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post...3.2 Low
- elfsight contact form widgetWordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerability7.5 High
- honding technology smart parking management systemHonding Technology Smart Parking Management System - Exposure of Sensitive Information9.3 Critical
- esigngenie foxit esign for wordpressWordPress Foxit eSign for WordPress plugin <= 2.0.3 - Other Vulnerability Type Vulnerability5.5 Medium
- whassan ki live video conferencesWordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability5.3 Medium
- kruger&matz com.pri.applockExposure of Applications' Encryption PINs in Kruger&Matz AppLock6.9 Medium
- fortinet forticlient, forticlientwindows +1 moreA exposure of sensitive system information to an unauthorized control sphere in Fortinet...4.8 Medium
- opentext advanced authenticationExposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.2.1 Low
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized Exposure of file path, file size or file existence5.9 Medium
- assured telematics inc. fleet management systemExposure of Sensitive System Information to an Unauthorized Control Sphere8.7 High
- solid plugins analyticswpWordPress AnalyticsWP plugin <= 2.1.2 - Sensitive Data Exposure vulnerability5.3 Medium
- redqteam wishlistWordPress Wishlist plugin <= 2.1.0 - Sensitive Data Exposure Vulnerability4.3 Medium
- thememove quickcal - appointment booking calendar for wordpressWordPress QuickCal plugin <= 1.0.15 - Sensitive Data Exposure Vulnerability4.3 Medium
- bluewave checkmateIn BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application...5.0 Medium
- vercel next.jsNext.js Race Condition to Cache Poisoning3.7 Low
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)5.3 Medium
- schweitzer engineering laboratories sel blueframe osExposure of Sensitive System Information5.7 Medium
- trifectatech sudo, trifectatechfoundation sudo-rs +1 moresudo-rs Allows Low Privilege Users to Enumerate Privileges of Others3.3 Low
- trifectatech sudo, trifectatechfoundation sudo-rs +1 moresudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders3.3 Low
- checkmkPotentially senitive path exposed via unauthenticated http route6.3 Medium
- wedevs wemailWordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability5.3 Medium
- vestel ac charger evc04Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere8.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server6.8 Medium
- endojs endoses's global contour bindings leak into Compartment lexical scope8.7 High
- markus drubba wplike2getWordPress wpLike2Get plugin <= 1.2.9 - Sensitive Data Exposure vulnerability5.3 Medium
- mediavine control panelWordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerability5.3 Medium
- Show moreLoading…