CWE-540: Inclusion of Sensitive Information in Source Code
The product (such as a web server or repository) provides access to source code is not intended to be accessible to users but contains sensitive information.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- No product listed WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page 7.5 High
- geovision inc. gv-eye GV-Eye Relay Payment API Key Vulnerability 7.5 High
- geovision inc. gv-eye GV-Eye Hardcoded API Key Vulnerability 7.5 High
- intelbras tip 125i Intelbras TIP 125i Básico sensitive information in source 2.3 Low
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 more Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an... 7.5 High
- ibm cognos analytics IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities 4.3 Medium
- fortinet fortimonitoronsight A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight... 9.6 Critical
- igloohome smart lock mobile application Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application 6.9 Medium
- xyproto algernon Algernon: Single-file mode unconditionally enables debug mode 7.5 High
- chargepoint home flex, home flex cph50 firmware +1 more ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability 7.5 High
- bentley systems itwin platform Bentley Systems iTwin Platform exposed access token 6.9 Medium
- dell objectscale, elastic cloud storage +1 more Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0,... 4.4 Medium
- ibm planning analytics local, planning analytics workspace +1 more IBM Planning Analytics Information Disclosure 4.3 Medium
- ibm analytics content hub IBM Analytics Content Hub information disclosure 6.8 Medium
- sick media server Credential disclosure 7.5 High
- ibm cognos analytics IBM Cognos Analytics information disclosure 5.3 Medium
- vivotek nvr nd8422p, nvr nd9525p, nvr nd9541p +2 more Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source 5.1 Medium
- ibm cognos analytics mobile IBM Cognos Mobile information disclosure 2.0 Low
- olajowon loggrove An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read... 8.2 High
- pmd PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext 9.3 Critical
- ibm maximo application suite IBM Maximo Application Suite information disclosure 5.3 Medium
- qnap ai core QNAP AI Core 7.9 High
- gitlab Inclusion of Sensitive Information in Source Code in GitLab 3.7 Low
- ibm openpages, openpages grc platform, openpages with watson +2 more IBM OpenPages information disclosure 4.3 Medium
- yunknet online school system, yunke online school system +1 more 云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in source 2.3 Low
- ibm datacap, datacap navigator +1 more IBM Datacap Navigator information disclosure 4.3 Medium
- tnb mobile solutions cockpit software, tnbmobil cockpit +1 more Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit Software 7.5 High
- keerti1924 secret-coder-php-project keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source code 3.7 Low
- keerti1924 php-mysql-user-login-system, php mysql user signup login system +1 more keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code 5.3 Medium
- ibm security verify governance IBM Security Verify Governance information disclosure 2.3 Low
- sangfor next-gen application firewall, net-gen application firewall +1 more Sangfor Next-Gen Application Firewall Source Code Disclosure 5.3 Medium
- dell replay manager for vmware, storage integration tools for vmware, storage vsphere client plugin +1 more +3 more Dell Storage Integration Tools for VMware (DSITV) 06.01.00.016 contain an information disclosure... 7.8 High
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 more Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers... 5.3 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 more Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities 4.9 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 more Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities 4.9 Medium
- w3 eden, inc. wordpress download manager, w3eden download manager +1 more WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal 6.5 Medium
- qnap qss Inclusion of Sensitive Information in QSS 7.8 High
- cisco web security appliance (wsa), content security management appliance, email security appliance +2 more +4 more Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability 4.3 Medium