Weakness (CWE)
CWE-221: Information Loss or Omission
Class Incomplete
The product does not record, or improperly records, security-relevant information that leads to an incorrect decision or hampers later analysis.
Source: MITRE CWE-221
9 results · Feed
-
High 8.8
Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web ori…
-
Medium 4.3
Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-orig…
-
High 8.8
Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to poten…
-
High 8.8
Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin polic…
-
Medium 6.5
Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web o…
-
Medium 4.3
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy …
-
Medium 6.5
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacke…
-
Medium 5.0
HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident respo…
-
Medium 6.3
Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in the Harden-Runner GitHub Action (Community Tier) that allows outbound network connections to evade audi…