Skip to content
OpenAdvisories

Weakness (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Class Draft Mapping discouraged

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.

    Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.

Source: MITRE CWE-200

All Critical High Medium Low Exploited only Public exploit

1,416 results · Clear filters · Feed

  • High 7.8
    CVE-2015-0310 Exploited EPSS 15%

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.43…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.5
    CVE-2012-5505

    Plone Information Disclosure

    atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.

    plone PyPI
  • High 7.0
    CVE-2014-2347 Public exploit

    AMTELCO miSecure Information Exposure

    Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.

    AMTELCO miSecureMessages
  • High 7.5
    CVE-2014-0786

    Ecava IntegraXor Information Exposure

    Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

    Ecava IntegraXor
  • High 7.5
    CVE-2014-0473

    Django Reuses Cached CSRF Token

    The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anon…

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2013-7130

    OpenStack Nova Live migration can leak root disk into ephemeral storage

    The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obt…

    nova nova Debian PyPI
  • High 7.5
    CVE-2014-0006

    OpenStack Swift Discloses Secret URLs to Timing Attack

    The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.

    swift swift Debian PyPI
  • High 7.5
    CVE-2010-0667

    MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

    MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.

    moin PyPI
  • High 7.5
    CVE-2008-6507

    phpBB vulnerable to sensitive information disclosure

    Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum.

    phpbb/phpbb Packagist
  • High 7.5
    CVE-2003-1567 EPSS 25%

    The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original …

  • High —
    CVE-2005-4875

    TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`

    TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

    typo3/cms Packagist
  • High 8.8
    CVE-2008-0655 Exploited EPSS 38%

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

    KEV Jun 8, 2022
  • High —
    CVE-2005-4836

    Apache Tomcat allows remote attackers to read JSP source files

    The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.

    org.apache.tomcat:tomcat Maven
  • High —
    CVE-2002-1394

    Apache Tomcat Source Code Disclosure

    Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.

    org.apache.tomcat:tomcat Maven
  • High 8.2
    CVE-1999-0468

    Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Sc…

  • High 7.3
    CVE-1999-0059

    IRIX fam service allows an attacker to obtain a list of all files on the server.