Weakness (CWE)
CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory
The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
How to prevent it (1 mitigation)
-
Architecture and Design, Operation, System Configuration
Do not expose file and directory information to the user.
Source: MITRE CWE-538
6 results · Clear filters · Feed
-
Low 2.3
An issue was discovered in Keyfactor SignServer before 7.6.0. A number of properties were identified to not have any re…
-
Low 3.3
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains…
-
Low 2.3CVE-2026-29114 Public exploit
A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that…
-
Low 3.3
HCL AION is affected by an internal filesystem paths disloser vulnerability
HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. Exposure of internal paths may reveal environment structure details which could potentially aid in further targeted attac…
-
Low 3.8
Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0
On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.
-
Low 1.8
File existence disclosue vulnerability in IDM plugin
File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior …