CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk guests can continue to receive video streams from call after being removed from a conversation4.8 Medium
- ibm websphere automation for ibm cloud pak for watson aiops, websphere automation for cloud pak for watson aiops +1 moreIBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure5.7 Medium
- google androidIn various functions of ap_input_processor.c, there is a possible way to record audio during a...3.3 Low
- google androidIn multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass...2.4 Low
- google androidIn enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of...3.3 Low
- m-files serverInformation disclosure in M-Files Server5.3 Medium
- g810-led project g810-led, debian linux +1 moreg810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to...6.5 Medium
- samtools htsjdkCreation of Temporary File in Directory with Insecure Permissions7.3 High
- joniles mpxjTemporary File Information Disclosure Vulnerability3.3 Low
- phpgurukul blood donor management system project blood donor management systemPHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard...8.1 High
- pgjdbc, postgresql jdbc driver, debian linux +2 moreTemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7 Medium
- manydesigns portofinoManyDesigns Portofino WarFileLauncher.java createTempDir temp file2.6 Low
- hashicorp nomad, nomad enterprise +1 moreNomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/5.0 Medium
- huawei emui, harmonyos +1 moreThe LBS module has a vulnerability in geofencing API access. Successful exploitation of this...7.5 High
- google android, samsung mobile devices +1 moreImproper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022...5.9 Medium
- ibm robotic process automation for cloud pakIBM Robotic Process Automation for Cloud Pak information disclosure3.3 Low
- ibm infosphere information server, infosphere information server on cloud +1 more"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information...6.5 Medium
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - Exposure of Information Through Directory Listing5.0 Medium
- gitlabAn information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3...6.8 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15...5.5 Medium
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 Critical
- joomla joomla\!, joomla! project cms +1 more[20221001] - Core - Debug Mode leaks full request payloads including passwords5.3 Medium
- tasksTasks.org vulnerable to data exfiltration by malicous app or adb5.5 Medium
- red hat openshiftThe deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat...7.5 High
- getkirby kirbyKirby CMS vulnerable to user enumeration in the brute force protection6.5 Medium
- gocdGoCD server secret encryption/decryption key leaked to agents during material serialization4.9 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence platform (admintools/query builder) +1 moreUnder certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which...6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h1, windows 10 version 21h2, windows 11 version 21h2 +3 more +5 moreWindows Mixed Reality Developer Tools Information Disclosure Vulnerability6.5 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager...3.7 Low
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a...4.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using...5.3 Medium
- samsung smartthingsImproper access control vulnerability cloudNotificationManager.java in SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in cloudNotificationManager.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in cloudNotificationManager.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89...4.0 Medium
- samsung smartthingsImproper access control vulnerability in cloudNotificationManager.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version...4.0 Medium
- samsung smartthingsImproper access control vulnerability in ContentsSharingActivity.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1...3.3 Low
- samsung mobile quickshare, samsung quick share +1 moreImproper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to...4.4 Medium
- samsung factorycamerafbImproper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3...7.3 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle No groups filtering in H5P activity attempts report4.3 Medium
- ibm qradar user behavior analyticsIBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive...4.3 Medium
- zammadZammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has...6.5 Medium
- apple macosAn issue in the handling of environment variables was addressed with improved validation. This...5.5 Medium
- keylimekeylime-agent-6.3.0-1.1 on GA media7.5 High
- intel ssd 600p firmware, ssd 660p firmware, ssd 665p firmware +27 more +29 moreProtection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged...7.9 High
- intel ssd 600p firmware, ssd 660p firmware, ssd 665p firmware +27 more +29 moreProtection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged...4.1 Medium
- apple ios, ipados, macos +2 more +4 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12...5.5 Medium
- Show moreLoading…