Skip to content
OpenAdvisories

Weakness (CWE)

CWE-210: Self-generated Error Message Containing Sensitive Information

Base Draft

The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.

How to prevent it (2 mitigations)

  1. Implementation, Build and Compilation

    Debugging information should not make its way into a production release.

  2. Implementation, Build and Compilation

    Debugging information should not make its way into a production release.

Source: MITRE CWE-210

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.7
    CVE-2026-73844

    CKAN MCP Server: Information disclosure via verbose error reflection

    CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at (or red…

    ondata ckan-mcp-server @aborruso/ckan-mcp-server npm
  • High 8.0
    CVE-2023-41027

    Juplink RX4-1500 Credential Disclosure Vulnerability

    Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.

    Juplink RX4-1500
  • Medium 4.3
    CVE-2021-40126

    Cisco Umbrella Email Enumeration Vulnerability

    A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure. This vulnerability is due to an overly descriptive error message on the dash…

    Cisco Cisco Umbrella Insights Virtual Appliance Network devices
  • Medium 4.3
    CVE-2018-19947

    The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vu…

    QNAP Systems Helpdesk