cve.bz

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, page 139

Filter

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

What the weakness is: CWE-200 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 59
  • CAPEC-13 Subverting Environment Variable Values Likelihood: High · Severity: Very High
  • CAPEC-22 Exploiting Trust in Client Likelihood: High · Severity: High
  • CAPEC-59 Session Credential Falsification through Prediction Likelihood: High · Severity: High
  • CAPEC-60 Reusing Session IDs (aka Session Replay) Likelihood: High · Severity: High
  • CAPEC-79 Using Slashes in Alternate Encoding Likelihood: High · Severity: High
  • CAPEC-116 Excavation Likelihood: High · Severity: Medium
  • CAPEC-169 Footprinting Likelihood: High · Severity: Very Low
  • CAPEC-224 Fingerprinting Likelihood: High · Severity: Very Low
  • CAPEC-285 ICMP Echo Request Ping Likelihood: Medium · Severity: Low
  • CAPEC-287 TCP SYN Scan Severity: Low
  • CAPEC-290 Enumerate Mail Exchange (MX) Records Severity: Low
  • CAPEC-291 DNS Zone Transfers Severity: Low
  • CAPEC-292 Host Discovery Severity: Low
  • CAPEC-293 Traceroute Route Enumeration Severity: Low
  • CAPEC-294 ICMP Address Mask Request Severity: Low
  • CAPEC-295 Timestamp Request Severity: Low
  • CAPEC-296 ICMP Information Request Severity: Low
  • CAPEC-297 TCP ACK Ping Severity: Low
  • CAPEC-298 UDP Ping Severity: Low
  • CAPEC-299 TCP SYN Ping Severity: Low
  • CAPEC-300 Port Scanning Severity: Low
  • CAPEC-301 TCP Connect Scan Severity: Low
  • CAPEC-302 TCP FIN Scan Severity: Low
  • CAPEC-303 TCP Xmas Scan Severity: Low
  • CAPEC-304 TCP Null Scan Severity: Low
  • CAPEC-305 TCP ACK Scan Severity: Low
  • CAPEC-306 TCP Window Scan Severity: Low
  • CAPEC-307 TCP RPC Scan Severity: Low
  • CAPEC-308 UDP Scan Severity: Low
  • CAPEC-309 Network Topology Mapping Severity: Low
  • CAPEC-310 Scanning for Vulnerable Software Severity: Low
  • CAPEC-312 Active OS Fingerprinting Likelihood: Medium · Severity: Low
  • CAPEC-313 Passive OS Fingerprinting Likelihood: High · Severity: Low
  • CAPEC-317 IP ID Sequencing Probe Likelihood: Medium · Severity: Low
  • CAPEC-318 IP 'ID' Echoed Byte-Order Probe Likelihood: Medium · Severity: Low
  • CAPEC-319 IP (DF) 'Don't Fragment Bit' Echoing Probe Likelihood: Medium · Severity: Low
  • CAPEC-320 TCP Timestamp Probe Likelihood: Medium · Severity: Low
  • CAPEC-321 TCP Sequence Number Probe Likelihood: Medium · Severity: Low
  • CAPEC-322 TCP (ISN) Greatest Common Divisor Probe Likelihood: Medium · Severity: Low
  • CAPEC-323 TCP (ISN) Counter Rate Probe Likelihood: Medium · Severity: Low
  • CAPEC-324 TCP (ISN) Sequence Predictability Probe Likelihood: Medium · Severity: Low
  • CAPEC-325 TCP Congestion Control Flag (ECN) Probe Likelihood: Medium · Severity: Low
  • CAPEC-326 TCP Initial Window Size Probe Likelihood: Medium · Severity: Low
  • CAPEC-327 TCP Options Probe Likelihood: Medium · Severity: Low
  • CAPEC-328 TCP 'RST' Flag Checksum Probe Likelihood: Medium · Severity: Low
  • CAPEC-329 ICMP Error Message Quoting Probe Likelihood: Medium · Severity: Low
  • CAPEC-330 ICMP Error Message Echoing Integrity Probe Likelihood: Medium · Severity: Low
  • CAPEC-472 Browser Fingerprinting Severity: Low
  • CAPEC-497 File Discovery Likelihood: High · Severity: Very Low
  • CAPEC-508 Shoulder Surfing Likelihood: High · Severity: High
  • CAPEC-573 Process Footprinting Likelihood: Low · Severity: Low
  • CAPEC-574 Services Footprinting Likelihood: Low · Severity: Low
  • CAPEC-575 Account Footprinting Likelihood: Low · Severity: Low
  • CAPEC-576 Group Permission Footprinting Likelihood: Low · Severity: Low
  • CAPEC-577 Owner Footprinting Likelihood: Low · Severity: Low
  • CAPEC-616 Establish Rogue Location Likelihood: Medium · Severity: Medium
  • CAPEC-643 Identify Shared Files/Directories on System Likelihood: Medium · Severity: Medium
  • CAPEC-646 Peripheral Footprinting Likelihood: Low · Severity: Medium
  • CAPEC-651 Eavesdropping Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-200, as MITRE names them. Credits.

Ask an AI about CWE-200

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-200: Exposure of Sensitive Information to an Unauthorized Actor and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/200.html and https://cve.bz/cve/cwe/200?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2017-16072EPSS 1.2%

    nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  2. 7.5CVE-2017-16071EPSS 1.1%

    nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  3. 7.5CVE-2017-16070EPSS 1.2%

    nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  4. 7.5CVE-2017-16069EPSS 1.2%

    nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  5. 7.5CVE-2017-16068EPSS 1.2%

    ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  6. 7.5CVE-2017-16067EPSS 1.1%

    node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  7. 7.5CVE-2017-16066EPSS 1.1%

    opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  8. 7.5CVE-2017-16065EPSS 1.2%

    openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  9. 7.5CVE-2017-16064EPSS 1.2%

    node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  10. 7.5CVE-2017-16063EPSS 1.1%

    node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  11. 7.5CVE-2017-16060EPSS 1.2%

    babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  12. 7.5CVE-2017-16059EPSS 1.1%

    mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  13. 7.5CVE-2017-16058EPSS 1.1%

    gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  14. 7.5CVE-2017-16057EPSS 1.1%

    nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  15. 7.5CVE-2017-16056EPSS 1.1%

    mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  16. 4.3CVE-2018-10198EPSS 1.0%

    An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets.

  17. 5.9CVE-2017-1476EPSS 2.2%

    IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attack…

  18. 5.3CVE-2017-1474EPSS 1.7%

    IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.

  19. 6.5CVE-2018-1000196EPSS 1.2%

    A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlab_notifier.rb, views/gitlab_notifier/global.erb that allows attackers with local Jenkins master file system access or control of…

  20. 5.3CVE-2018-10599EPSS 0.4%

    IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with s…

  21. 6.5CVE-2018-1000191EPSS 1.0%

    A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using…

  22. 6.5CVE-2018-1000190EPSS 1.0%

    A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker…

  23. 6.5CVE-2018-1000187EPSS 1.1%

    A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs.

  24. 6.5CVE-2018-1000186EPSS 1.0%

    A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using at…

  25. 6.5CVE-2018-1000183EPSS 1.0%

    A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified c…

  26. 6.5CVE-2018-1332EPSS 1.4%

    Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons.

  27. 7.5CVE-2018-1000181EPSS 1.5%

    Kitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that can be exploited by a crafted URL resulting in information disclosure.

  28. 9.8CVE-2018-11554EPSS 1.4%

    The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier fo…

  29. 7.5CVE-2017-12092EPSS 2.6%

    An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to …

  30. 7.5CVE-2017-16055EPSS 1.1%

    `sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  31. 7.5CVE-2017-16054EPSS 1.2%

    `nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  32. 7.5CVE-2017-16053EPSS 1.1%

    `fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  33. 7.5CVE-2017-16052EPSS 1.2%

    `node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  34. 7.5CVE-2017-16051EPSS 1.3%

    `sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  35. 7.5CVE-2017-16050EPSS 1.1%

    `sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  36. 7.5CVE-2017-16049EPSS 1.2%

    `nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  37. 7.5CVE-2017-16048EPSS 1.2%

    `node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  38. 7.5CVE-2017-16045EPSS 1.1%

    `jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  39. 7.5CVE-2017-16044EPSS 1.5%

    `d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

  40. 6.5CVE-2017-16024EPSS 2.5%

    The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowin…

  41. 5.9CVE-2017-16007EPSS 0.9%

    node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an att…

  42. 5.3CVE-2018-3809EPSS 1.0%

    Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored.

  43. 6.8CVE-2018-11195EPSS 0.5%

    Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have lo…

  44. 4.3CVE-2018-5525EPSS 1.0%

    A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration …

  45. 5.3CVE-2018-11645EPSS 2.6%

    psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.

  46. 4.3CVE-2018-1532EPSS 1.0%

    IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 142430.

  47. 8.8CVE-2016-10533EPSS 1.4%

    express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for `GET /User?distinct=passw…

  48. 5.9CVE-2016-10530EPSS 1.3%

    The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular use…

  49. 7.5CVE-2016-10519EPSS 1.6%

    A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory.

  50. 5.3CVE-2015-9236EPSS 1.5%

    Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden. If the connection has CORS…