CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory
The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 moreMishandling of file-system uid/gid with namespaces in shiftfs6.5 Medium
- schneider-electric modicon m340 firmware, modicon m580 firmware, tsxmcpc002m firmware +20 more +22 moreA CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon...7.5 High
- elastic code, kibana +1 moreA local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a...6.5 Medium
- cisco enterprise network functions virtualization infrastructure, enterprise nfv infrastructure software +1 moreCisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability4.3 Medium
- cpanelcPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).2.7 Low
- jenkins credentials, jenkins project credentials plugin +1 moreInsertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin4.3 Medium
- apache thriftApache Thrift Node.js static web server sandbox escape6.5 Medium
- wisetail learning management systemWisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR)...4.3 Medium
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...7.5 High
- siemens simatic wincc oa operator, siemens ag simatic wincc oa operator ios app +1 moreA vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4)....4.6 Medium
- synology surveillance stationFile and directory information exposure vulnerability in SYNO.SurveillanceStation...6.5 Medium
- siemens apogee pxc firmware, apogee pxc modular firmware, talon tc compact firmware +1 more +3 moreA vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation...5.3 Medium
- sendioSendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed...7.5 High
- mozilla firefoxThe existence of a specifically requested local file can be found due to the double firing of the...3.3 Low
- advantech webaccessAdvantech WebAccess File and Directory Information Exposure5.0
- advantech webaccessAdvantech WebAccess File and Directory Information Exposure7.5
- redhat cloudforms, red hat cloudforms for rhel 6, cloudforms tools for rhel 5 +1 more +3 morePulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file5.5 Medium