Skip to content
OpenAdvisories

Weakness (CWE)

CWE-528: Exposure of Core Dump File to an Unauthorized Control Sphere

Variant Draft

The product generates a core dump file in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.

How to prevent it (1 mitigation)

  1. System Configuration

    Protect the core dump files from unauthorized access.

Source: MITRE CWE-528

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.0
    CVE-2025-48928 Exploited

    The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalen…

    TeleMessage service
    KEV Jul 1, 2025
  • Medium 5.9
    CVE-2024-10403

    SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

    Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later capt…

    Brocade Fabric OS