Weakness (CWE)
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
How to prevent it (1 mitigation)
-
Architecture and Design
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Source: MITRE CWE-200
6,476 results · Feed
-
Critical —
Json response for search reveals Solr credentials
### Impact An error in Ibexa's Solr search engine results in potential exposure of Solr credentials. This is a critical vulnerability and all supported versions of the engine are affected. Those not using the Solr search engine are not affected. ### Patches T…
-
Critical —
Json response for search reveals Solr credentials
### Impact An error in Ibexa's Solr search engine results in potential exposure of Solr credentials. This is a critical vulnerability and all supported versions of the engine are affected. Those not using the Solr search engine are not affected. ### Patches T…
-
Medium 4.0
Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information
Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially sensitive information exposed to an act…
-
Unscored —
Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow identification of valid user accounts via username enum…
-
High 7.5
Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transa…
-
Unscored —
Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-…
-
Unscored —
Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed…
-
Low 2.9
Lack Of Secure Keyboard Entry Protection in MacOS Desktop
Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input.
-
Unscored —
An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted m…
-
Unscored —
An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
-
Unscored —
An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted …
-
Unscored —
An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted me…
-
Unscored —
An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafte…
-
Unscored —
An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted…
-
Unscored —
An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted mes…
-
Unscored —
An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access tok…
-
Medium 5.3
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, d…
-
Medium 5.3
The responses for web queries with certain parameters disclose internal path of resources. This information can be used…
-
Medium 5.3
Synapse vulnerable to leak of remote user device information
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encourag…
-
Medium 6.5
IBM QRadar information disclosure
IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID…
-
High 7.6
An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications t…
-
Medium 5.3
Elastic Cloud on Kubernetes (ECK) secret token configuration issue
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
-
Unscored —
An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers t…
-
Unscored —
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16…
-
High 7.5
EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
-
Medium 4.3
Jenkins Warnings Plugin exposures system-scoped credentials
Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1.
-
High 7.5
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
-
Unscored —
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via cra…
-
Unscored —
An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
-
Unscored —
An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET requ…
-
Medium 6.5
Fides Information Disclosure Vulnerability in Config API Endpoint
Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows users to retrieve its configuration using t…
-
Medium 6.5
Exposure of hashed user passwords via REST API in Nautobot
Nautobot is a Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 2.0.x, certain REST API endpoints, in combination with the `?depth=<N>` query parameter, can expose hashed u…
-
High 8.2
The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send cr…
-
High 8.2
The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access toke…
-
High 8.2
The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access toke…
-
High 8.2
The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token a…
-
Medium 4.3
Apache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0. Sensitive configuration information has been exposed to authenticated users with the ability to read configuratio…
-
Medium 4.3
The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard `postMess…
-
Unscored —
The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion…