Weakness (CWE)
CWE-205: Observable Behavioral Discrepancy
The product's behaviors indicate important differences that may be observed by unauthorized actors in a way that reveals (1) its internal state or decision process, or (2) differences from other products with equivalent functionality.
How to prevent it (1 mitigation)
-
Implementation
Ideally, a product should provide as little information about its internal operations as possible.
Source: MITRE CWE-205
3 results · Feed
-
Medium 5.3
Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'
In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream source port …
-
Low 3.7
spa-cartcms Username login observable behavioral discrepancy
A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Username Handler. The manipulation of the argument email leads to observable behavioral discrepancy. It…
-
Unscored —
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remo…