CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, page 95

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

What the weakness is: CWE-200 at MITRE

1. 6.5CVE-2022-39359EPSS 0.7%2022-10-26

   Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1.41.9, custom GeoJSON map URL address would follow redirects to addresses that were otherwise disallowed, like link-loc…

2. 6.5CVE-2022-39358EPSS 0.5%2022-10-26

   Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, and 1.42.6, it was possible to circumvent locked parameters when requesting data for a question in an embedded dashboard by constructing a m…

3. 7.1CVE-2022-20955EPSS 0.5%2022-10-26

   Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. F…

4. 7.1CVE-2022-20954EPSS 0.5%2022-10-26

   Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. F…

5. 5.5CVE-2022-20953EPSS 0.5%2022-10-26

   Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. F…

6. 7.2CVE-2022-20811EPSS 0.8%2022-10-26

   Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. F…

7. 6.7CVE-2022-20776EPSS 0.5%2022-10-26

   Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. F…

8. 5.5CVE-2022-33181EPSS 0.2%2022-10-25

   An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a local authenticated attacker to read sensitive files using switch commands “configshow” and …

9. 5.3CVE-2022-27912EPSS 0.6%2022-10-25

   An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.

10. 7.5CVE-2022-26423EPSS 0.8%2022-10-21

    Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

11. 8.1CVE-2022-1070EPSS 0.7%2022-10-21

    Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

12. 6.5CVE-2022-41707EPSS 1.0%2022-10-19

    Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.

13. 5.3CVE-2022-43410EPSS 0.8%2022-10-19

    Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no permission to access.

14. 5.5CVE-2022-39253EPSS 1.5%2022-10-19

    Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performi…

15. 7.5CVE-2020-8975EPSS 1.3%2022-10-17

    ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access sensitive information about the system.

16. 7.5CVE-2022-3501EPSS 0.6%2022-10-17

    Article template contents with sensitive data could be accessed from agents without permissions.

17. 6.5CVE-2022-39309EPSS 1.1%2022-10-14

    GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions prior to 21.1.0 leak the symmetric key used to encrypt/decrypt any secure vari…

18. 5.5CVE-2022-38689EPSS 0.2%2022-10-14

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

19. 5.5CVE-2022-38688EPSS 0.2%2022-10-14

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

20. 7.5CVE-2022-39201EPSS 1.7%2022-10-13

    Grafana is an open source observability and data visualization platform. Starting with version 5.0.0-beta1 and prior to versions 8.5.14 and 9.1.8, Grafana could leak the authentication cookie of users to plugins. The vulnerability impacts …

21. 7.5CVE-2022-31130EPSS 1.3%2022-10-13

    Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could leak authentication tokens to some destination plugins under some conditions. The vulnerability impa…

22. 7.8CVE-2022-33919EPSS 0.2%2022-10-12

    Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information.

23. 7.6CVE-2022-39013EPSS 0.7%2022-10-11

    Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and …

24. 4.9CVE-2022-35296EPSS 0.9%2022-10-11

    Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to h…

25. 5.7CVE-2022-40177EPSS 1.0%2022-10-11

    A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), …

26. 7.5CVE-2022-39289EPSS 1.0%2022-10-07

    ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without Sy…

27. 3.3CVE-2022-39859EPSS 0.2%2022-10-07

    Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent.

28. 3.3CVE-2022-39856EPSS 0.1%2022-10-07

    Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information.

29. 3.3CVE-2022-39848EPSS 0.1%2022-10-07

    Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log.

30. 6.5CVE-2022-39222EPSS 1.6%2022-10-06

    Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability if …

31. 5.9CVE-2022-32540EPSS 0.4%2022-09-30

    Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable…

32. 4.9CVE-2022-23726EPSS 0.7%2022-09-30

    PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.

33. 4.9CVE-2022-3348EPSS 1.1%2022-09-28

    Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.

34. 5.3CVE-2022-39031EPSS 0.7%2022-09-28

    Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Session IDs of other general users only.

35. 7.5CVE-2022-39030EPSS 0.9%2022-09-28

    smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.

36. 6.5CVE-2022-39029EPSS 0.8%2022-09-28

    Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.

37. 8.2CVE-2022-39258ExploitEPSS 1.8%2022-09-27

    mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger a…

38. 4.3CVE-2022-35249EPSS 0.8%2022-09-23

    A information disclosure vulnerability exists in Rocket.Chat <v5 where the getUserMentionsByChannel meteor server method discloses messages from private channels and direct messages regardless of the users access permission to the room.

39. 4.3CVE-2022-35247EPSS 0.7%2022-09-23

    A information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the lack of ACL checks in the getRoomRoles Meteor method leak channel members with special roles to unauthorized clients.

40. 4.3CVE-2022-35246EPSS 0.7%2022-09-23

    A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to a…

41. 5.5CVE-2022-32849EPSS 0.3%2022-09-23

    An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to …

42. 5.5CVE-2022-32825EPSS 0.3%2022-09-23

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory.

43. 5.5CVE-2022-32818EPSS 1.0%2022-09-23

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5. An app may be able to leak sensitive kernel state.

44. 5.5CVE-2022-32805EPSS 0.7%2022-09-23

    The issue was addressed with improved handling of caches. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to access sensitive user information.

45. 4.3CVE-2022-32229EPSS 0.8%2022-09-23

    A information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat.getThreadsList lack of sanitization of user inputs and can therefore leak private thread messages to unauthorized users via Mongo DB injection.

46. 4.3CVE-2022-32228EPSS 0.8%2022-09-23

    An information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 since the getReadReceipts Meteor server method does not properly filter user inputs that are passed to MongoDB queries, allowing $regex queries to enume…

47. 6.5CVE-2022-32220EPSS 1.0%2022-09-23

    An information disclosure vulnerability exists in Rocket.Chat <v5 due to the getUserMentionsByChannel meteor server method discloses messages from private channels and direct messages regardless of the users access permission to the room.

48. 4.3CVE-2022-32219EPSS 0.9%2022-09-23

    An information disclosure vulnerability exists in Rocket.Chat <v4.7.5 which allowed the "users.list" REST endpoint gets a query parameter from JSON and runs Users.find(queryFromClientSide). This means virtually any authenticated user can a…

49. 4.3CVE-2022-32218EPSS 0.8%2022-09-23

    An information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 due to the actionLinkHandler method was found to allow Message ID Enumeration with Regex MongoDB queries.

50. 7.5CVE-2022-40629EPSS 1.6%2022-09-23

    This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauth…