Skip to content
OpenAdvisories

Weakness (CWE)

CWE-210: Self-generated Error Message Containing Sensitive Information

Base Draft

The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.

How to prevent it (2 mitigations)

  1. Implementation, Build and Compilation

    Debugging information should not make its way into a production release.

  2. Implementation, Build and Compilation

    Debugging information should not make its way into a production release.

Source: MITRE CWE-210

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-40126

    Cisco Umbrella Email Enumeration Vulnerability

    A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure. This vulnerability is due to an overly descriptive error message on the dash…

    Cisco Cisco Umbrella Insights Virtual Appliance Network devices
  • Medium 4.3
    CVE-2018-19947

    The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vu…

    QNAP Systems Helpdesk