Weakness (CWE)
CWE-210: Self-generated Error Message Containing Sensitive Information
Base Draft
The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.
How to prevent it (2 mitigations)
-
Implementation, Build and Compilation
Debugging information should not make its way into a production release.
-
Implementation, Build and Compilation
Debugging information should not make its way into a production release.
Source: MITRE CWE-210
1 result · Clear filters · Feed
-
High 8.0
Juplink RX4-1500 Credential Disclosure Vulnerability
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.