CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure5.3 Medium
- castos seriously simple podcastingWordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability5.3 Medium
- uncanny owl automatorWordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability4.3 Medium
- ibm concertIBM Concert Information Disclosure5.3 Medium
- vodacom vodafone h500sVodafone H500s WiFi Password Disclosure via activation.json8.7 High
- iq service international iq-supportIQ Service International｜IQ-Support - Exposure of Sensitive Information6.9 Medium
- wpswings woocommerce ultimate points and rewardsWordPress WooCommerce Ultimate Points And Rewards plugin <= 2.10.2 - Sensitive Data Exposure vulnerability4.3 Medium
- ibm openpagesIBM OpenPages Information Disclosure4.3 Medium
- amazon workspacesImproper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions...8.8 High
- nagios xiNagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure6.0 Medium
- nagios xiNagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure7.1 High
- nagios xiNagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes7.1 High
- nagios xiNagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure7.3 High
- vertikal systems hospital manager backend servicesVertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere8.7 High
- fantasticplugins sumo affiliates proWordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability4.3 Medium
- hp thinpro, hp inc thinpro 8.1 +1 moreHP ThinPro 8.1 SP8 Security Updates5.1 Medium
- thm pilosPILOS Exposes PHP version5.3 Medium
- themehunk wp popup builderWordPress WP Popup Builder plugin <= 1.3.8 - Sensitive Data Exposure vulnerability5.3 Medium
- tibbo systems aggregate network managerTibbo AggreGate Network Manager < 6.40.05 System Information Exposure6.9 Medium
- gallagher command centre serverExposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the...9.9 Critical
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability4.9 Medium
- themeatelier idonateproWordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability6.5 Medium
- beyaz bilgisayar software design industry and trade ltd. co. cityplusInformation Disclosure in Beyaz Computer's CityPLus8.2 High
- ancorathemes unicaHCL Unica 12.1.10 is affected by an exposure of sensitive information5.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Session Token Disclosure Vulnerability4.8 Medium
- nagios log serverNagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext...9.9 Critical
- sick baggage analytics, enterprise analytics, logistic diagnostic analytics +2 more +4 moreUsername Disclosure Through Missing Authentication5.3 Medium
- sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 moreSensitive Information Disclosure Through Missing Authentication5.3 Medium
- sick enterprise analyticsUser Enumeration5.3 Medium
- yosmart yolink smart hubThe YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct...2.2 Low
- honzat page manager for elementorWordPress Page Manager for Elementor Plugin <= 2.0.5 - Sensitive Data Exposure Vulnerability4.3 Medium
- coscheduleWordPress CoSchedule Plugin <= 3.3.11 - Sensitive Data Exposure Vulnerability5.3 Medium
- codename065 download managerWordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability5.3 Medium
- darren cooney ajax load moreWordPress Ajax Load More Plugin <= 7.6.0.2 - Sensitive Data Exposure Vulnerability5.3 Medium
- nurul amin wp system informationWordPress WP System Information Plugin <= 1.5 - Sensitive Data Exposure Vulnerability4.3 Medium
- etruel wpematico rss feed fetcherWordPress WPeMatico RSS Feed Fetcher Plugin <= 2.8.10 - Sensitive Data Exposure Vulnerability4.3 Medium
- nerdpress hubbub liteWordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability4.3 Medium
- ays pro quiz makerWordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability5.3 Medium
- ibm watsonx.dataIBM watsonx.data information disclosure4.3 Medium
- vegagrup software vega masterInformation Disclosure in Vegagrup Software's Vega Master8.6 High
- palo alto networks user-id credential agentUser-ID Credential Agent: Cleartext Exposure of Service Account password7.2 High
- digiever ds-1200, ds-16x00-rm pro+, ds-16x00-rm uhd +15 more +17 moreDigiever｜NVR - Exposure of Sensitive Information10.0 Critical
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab4.3 Medium
- rockwell automation factorytalk® analytics™ logixai®, rockwellautomation factorytalk analytics logixai +1 moreRockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB8.7 High
- rami yushuvaev site infoWordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability2.7 Low
- mahmudul hasan arif ninja chartsWordPress Ninja Charts plugin <= 3.3.5 - Sensitive Data Exposure vulnerability5.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator information disclosure2.7 Low
- ibm devops deploy, urbancode deploy +1 moreIBM DevOps Deploy / IBM UrbanCode Deploy information disclosure4.3 Medium
- invoice ninja ninjaPrivilege Escalation via get-task-allow entitlement in Invoice Ninja4.8 Medium
- macvimPrivilege Escalation via get-task-allow entitlement in MacVim.app4.8 Medium
- Show moreLoading…