CWE-1320: Improper Protection for Outbound Error Messages and Alert Signals

Filter

Untrusted agents can disable alerts about signal conditions exceeding limits or the response mechanism that handles such alerts.

What the weakness is: CWE-1320 at MITRE. All weaknesses

Related attack patterns (CAPEC): 2

CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels Likelihood: High · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-1320, as MITRE names them. Credits.

Ask an AI about CWE-1320

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-1320: Improper Protection for Outbound Error Messages and Alert Signals and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1320.html and https://cve.bz/cve/cwe/1320?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

7.5CVE-2023-5635EPSS 0.6%2023-12-01
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ArslanSoft Education Portal allows Account Footprinting. This issue affects Education Portal: before v1.1.
7.5CVE-2023-5443EPSS 0.5%2023-10-27
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E-invoice: before 2.1.
7.5CVE-2023-5570EPSS 0.5%2023-10-27
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. This issue affects Home Manager Gateway: before v.1.27.12.
7.5CVE-2023-1014EPSS 0.5%2023-03-30
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting. This issue affects Vira-Investing: before 1.0.84.86.
9.8CVE-2023-0839EPSS 0.6%2023-03-06
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting. This issue affects inSCADA: before 20230115-1.
7.8CVE-2022-2319EPSS 0.5%2022-09-01
A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length.