Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1320: Improper Protection for Outbound Error Messages and Alert Signals

Base Draft

Untrusted agents can disable alerts about signal conditions exceeding limits or the response mechanism that handles such alerts.

How to prevent it (1 mitigation)
  1. Architecture and Design

    Alert signals generated by critical events should be protected from access by untrusted agents. Only hardware or trusted firmware modules should be able to alter the alert configuration.

Source: MITRE CWE-1320

7 results · Feed

  • Medium 5.6

    nocobase JWT Service jwt-service.ts hard-coded key

    A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37. The affected element is an unknown function of the file nocobase\packages\core\auth\src\base\jwt-service.ts of the component JWT Service. The manipulation of the argument API_KEY results in …

  • High 7.5

    User Enumeration in ArslanSoft's Education Portal

    Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ArslanSoft Education Portal allows Account Footprinting. This issue affects Education Portal: before v1.1.

  • High 7.5

    User Enumeration in EDM Informatic's E-Invoice Software

    Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E-invoice: before 2.1.

  • High 7.5

    User Enumeration in Inohom's Home Manager Gateway

    Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. This issue affects Home Manager Gateway: before v.1.27.12.

  • High 7.5

    Information disclosure in Vira-Investing

    Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting. This issue affects Vira-Investing: before 1.0.84.86.

  • Critical 9.8

    Improper Error Handling in inSCADA

    Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting. This issue affects inSCADA: before 20230115-1.

  • Unscored —

    A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due…