CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, page 104

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

What the weakness is: CWE-200 at MITRE

1. 5.3CVE-2021-39223EPSS 1.1%2021-10-25

   Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Richdocuments application prior to versions 3.8.6 and 4.2.3 returned verbatim exception messages to the user. This could result in a full path disclosure on shar…

2. 3.5CVE-2021-39220EPSS 0.9%2021-10-25

   Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to versions 1.10.4 and 1.11.0 does by default not render images in emails to not leak the read state or user IP. The privacy filter failed …

3. 5.3CVE-2017-20007EPSS 1.1%2021-10-25

   Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attack…

4. 6.5CVE-2021-42536EPSS 0.9%2021-10-22

   The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.

5. 9.1CVE-2021-31381EPSS 1.2%2021-10-19

   A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to d…

6. 5.3CVE-2021-31380EPSS 1.1%2021-10-19

   A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP res…

7. 5.3CVE-2021-31371EPSS 0.8%2021-10-19

   Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an QFX5000 Series switch, leaking configuration information s…

8. 5.3CVE-2021-31352EPSS 0.8%2021-10-19

   An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sensitive information. A remote attacker wi…

9. 5.3CVE-2021-41140EPSS 0.9%2021-10-19

   Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affected versions reactions given by user to secure topics and private messages are visible. This issue is patched in versio…

10. 3.3CVE-2020-4951EPSS 0.3%2021-10-15

    IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information.

11. 6.5CVE-2021-22036EPSS 0.9%2021-10-13

    VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRea…

12. 5.3CVE-2021-20832EPSS 0.8%2021-10-13

    InBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90(510) contain a vulnerability which may lead to information disclosure only when it works with the body composition analyzer InBody Dial. This m…

13. 6.5CVE-2021-33727EPSS 0.9%2021-10-12

    A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affe…

14. 6.5CVE-2021-32028EPSS 1.6%2021-10-11

    A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to …

15. 6.5CVE-2021-32029EPSS 1.5%2021-10-08

    A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentia…

16. 7.5CVE-2021-42089EPSS 1.1%2021-10-07

    An issue was discovered in Zammad before 4.1.1. The REST API discloses sensitive information.

17. 4.3CVE-2021-34702EPSS 0.9%2021-10-06

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to improper enforcement of administrator…

18. 6.5CVE-2021-41125EPSS 1.3%2021-10-06

    Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests will expose your credentials to the reque…

19. 3.3CVE-2021-25486EPSS 0.10%2021-10-06

    Exposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an attacker detect device information via analyzing packet in log.

20. 5.5CVE-2021-0644EPSS 0.1%2021-10-06

    In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges …

21. 7.5CVE-2021-41124EPSS 1.1%2021-10-05

    Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use [`HttpAuthMiddleware`](http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#module-scrapy.downloadermiddlewares.ht…

22. 7.5CVE-2021-41120EPSS 1.5%2021-10-05

    sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page done after checkout was created with autoincremented payment id (/pay-with-paypal/{id}) and therefore it was easy…

23. 5.3CVE-2021-41123EPSS 0.9%2021-10-04

    Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application publishes /metrics endpoint available to any user. None of the survey answers are ever exposed, only the aggregate counte…

24. 7.5CVE-2021-41092EPSS 1.7%2021-10-04

    Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.…

25. 7.5CVE-2021-23858EPSS 1.2%2021-10-04

    Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, device details are exposed which include…

26. 7.5CVE-2021-23855EPSS 0.6%2021-10-04

    The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables.

27. 7.5CVE-2021-41109EPSS 1.2%2021-09-30

    Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version 4.10.4, for regular (non-LiveQuery) queries, the session token is removed from the response, but for LiveQuery payload…

28. 9.8CVE-2021-41301EPSS 2.0%2021-09-30

    ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthenticated attacker to remotely disclose sensitive information an…

29. 4.3CVE-2021-39857EPSS 2.5%2021-09-29

    Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker …

30. 6.5CVE-2021-39856EPSS 2.4%2021-09-29

    Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this…

31. 6.5CVE-2021-39855EPSS 2.4%2021-09-29

    Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this…

32. 4.3CVE-2021-24661EPSS 0.8%2021-09-27

    The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable t…

33. 9.4CVE-2021-22272EPSS 0.7%2021-09-27

    The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A suc…

34. 5.5CVE-2021-22276EPSS 0.3%2021-09-23

    The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.

35. 5.5CVE-2021-26333EPSS 0.5%2021-09-21

    An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting …

36. 7.5CVE-2021-41082EPSS 1.8%2021-09-20

    Discourse is a platform for community discussion. In affected versions any private message that includes a group had its title and participating user exposed to users that do not have access to the private messages. However, access control…

37. 6.5CVE-2021-24585EPSS 1.2%2021-09-20

    The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the user related to the Even Head of the Timeslot in the response when requesting t…

38. 7.5CVE-2021-40690EPSS 7.4%2021-09-19

    All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows…

39. 5.3CVE-2021-39327ExploitEPSS 72%2021-09-17

    The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backup_log.txt file which grants attackers the full path of the site, in addition to …

40. 8.8CVE-2021-40862EPSS 1.0%2021-09-15

    HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configur…

41. 5.3CVE-2021-39211ExploitEPSS 4.5%2021-09-15

    GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and server information. This issue is fixed in version 9.5.6. As a workaround, remove the fi…

42. 5.3CVE-2021-20582EPSS 0.9%2021-09-14

    IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force …

43. 4.3CVE-2021-37192EPSS 0.4%2021-09-14

    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known use…

44. 4.3CVE-2021-37190EPSS 0.4%2021-09-14

    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.

45. 7.5CVE-2021-22527EPSS 0.7%2021-09-13

    Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

46. 6.5CVE-2021-39203EPSS 0.9%2021-09-09

    WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated users who don't have permission to view private post types/data can bypass restric…

47. 5.3CVE-2021-39200EPSS 2.0%2021-09-09

    WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions output data of the function wp_die() can be leaked under certain conditions, which can include d…

48. 5.5CVE-2021-25464EPSS 0.3%2021-09-09

    An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak.

49. 5.5CVE-2021-34771EPSS 0.3%2021-09-09

    A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information than their privileges allow. This vulnerability is due to insufficient application of restrictions during the execution …

50. 2.7CVE-2021-28566EPSS 1.4%2021-09-08

    Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to …