CWE-203: Observable Discrepancy, page 11

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

What the weakness is: CWE-203 at MITRE

1. 3.3CVE-2022-20251EPSS 0.10%2022-08-11

   In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privile…

2. 3.3CVE-2022-20249EPSS 0.10%2022-08-11

   In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privile…

3. 5.5CVE-2022-20242EPSS 0.10%2022-08-11

   In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges …

4. 5.5CVE-2021-0975EPSS 0.10%2022-08-11

   In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no addition…

5. 5.6CVE-2021-46778EPSS 0.2%2022-08-10

   Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on schedu…

6. 7.5CVE-2022-20866EPSS 18%2022-08-10

   A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve an RSA private ke…

7. 4.7CVE-2022-34704EPSS 1.2%2022-08-09

   Windows Defender Credential Guard Information Disclosure Vulnerability

8. 7.5CVE-2022-24912EPSS 1.2%2022-07-29

   The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret.…

9. 5.3CVE-2022-36885EPSS 0.9%2022-07-27

   Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook sig…

10. 6.5CVE-2022-1146EPSS 0.9%2022-07-23

    Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

11. 6.5CVE-2022-1139EPSS 0.9%2022-07-23

    Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

12. 5.3CVE-2022-32425EPSS 0.6%2022-07-14

    The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time.

13. 7.5CVE-2022-31142EPSS 1.5%2022-07-14

    @fastify/bearer-auth is a Fastify plugin to require bearer Authorization headers. @fastify/bearer-auth prior to versions 7.0.2 and 8.0.1 does not securely use crypto.timingSafeEqual. A malicious attacker could estimate the length of one va…

14. 5.3CVE-2022-20752EPSS 1.0%2022-07-06

    A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to perform a…

15. 5.3CVE-2021-41634EPSS 1.0%2022-06-24

    A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames.

16. 7.5CVE-2022-34174EPSS 1.6%2022-06-23

    In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, w…

17. 6.5CVE-2022-24436EPSS 12%2022-06-15

    Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via network access.

18. 6.5CVE-2022-23823EPSS 1.2%2022-06-15

    A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.

19. 5.9CVE-2022-27221EPSS 1.0%2022-06-14

    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a stri…

20. 6.2CVE-2022-0823EPSS 0.2%2022-06-09

    An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack.

21. 4.3CVE-2022-32273EPSS 0.8%2022-06-08

    As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server.

22. 4.4CVE-2022-29185EPSS 0.9%2022-05-20

    totp-rs is a Rust library that permits the creation of 2FA authentification tokens per time-based one-time password (TOTP). Prior to version 1.1.0, token comparison was not constant time, and could theorically be used to guess value of an …

23. 5.3CVE-2022-24043EPSS 1.1%2022-05-20

    A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The logi…

24. 5.5CVE-2021-33149EPSS 0.3%2022-05-12

    Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

25. 6.5CVE-2021-46744EPSS 0.3%2022-05-11

    An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.

26. 5.3CVE-2021-33845EPSS 0.9%2022-05-06

    The Splunk Enterprise REST API allows enumeration of usernames via the lockout error message. The potential vulnerability impacts Splunk Enterprise instances before 8.1.7 when configured to repress verbose login errors.

27. 5.5CVE-2022-1318EPSS 0.1%2022-04-20

    Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communications packets are predictable. This would…

28. 3.3CVE-2022-27814EPSS 0.5%2022-04-14

    SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.

29. 6.5CVE-2022-22356EPSS 0.9%2022-04-05

    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts. IBM X-Force ID: 220487.

30. 5.5CVE-2021-39791EPSS 0.1%2022-03-30

    In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional executi…

31. 5.5CVE-2021-39788EPSS 0.1%2022-03-30

    In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information disclosure. This could lead to local information disclosure with no additional exec…

32. 5.5CVE-2021-39775EPSS 0.1%2022-03-30

    In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges nee…

33. 5.5CVE-2021-39773EPSS 0.1%2022-03-30

    In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is …

34. 5.5CVE-2021-39766EPSS 0.1%2022-03-30

    In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges n…

35. 5.5CVE-2021-39761EPSS 0.1%2022-03-30

    In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges need…

36. 5.5CVE-2021-39760EPSS 0.1%2022-03-30

    In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileg…

37. 5.5CVE-2021-39756EPSS 0.1%2022-03-30

    In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges …

38. 5.5CVE-2021-39755EPSS 0.1%2022-03-30

    In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query permissions due to side channel information disclosure. This could lead to local information disclosure with no additional…

39. 5.5CVE-2021-39754EPSS 0.1%2022-03-30

    In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privilege…

40. 5.5CVE-2021-39745EPSS 0.1%2022-03-30

    In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution p…

41. 5.5CVE-2021-39744EPSS 0.1%2022-03-30

    In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution p…

42. 3.7CVE-2022-24784EPSS 1.0%2022-03-25

    Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single character of a user's password hash using a specially crafted regular expression filter in the users endpoint of the REST API. …

43. 5.5CVE-2021-44421EPSS 0.4%2022-03-10

    The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis.

44. 7.5CVE-2020-36517EPSS 2.9%2022-03-10

    An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration.

45. 7.5CVE-2021-42016EPSS 0.6%2022-03-08

    A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802, RUGGEDCOM i803, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM RMC30, RUGGEDCOM RMC838…

46. 5.3CVE-2022-0564EPSS 1.4%2022-02-21

    A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful explo…

47. 6.5CVE-2022-23643EPSS 0.8%2022-02-15

    Sourcegraph is a code search and navigation engine. Sourcegraph versions 3.35 and 3.36 reintroduced a previously fixed side-channel vulnerabilitity in the Code Monitoring feature where strings in private source code could be guessed by an …

48. 4.3CVE-2022-0569EPSS 1.0%2022-02-14

    Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.

49. 5.5CVE-2021-0524EPSS 0.1%2022-02-11

    In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages due to side channel information disclosure. This could lead to local information disclosure with no additional executio…

50. 5.3CVE-2021-45901ExploitEPSS 14%2022-02-10

    The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.