cve.bz

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Filter

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

What the weakness is: CWE-497 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 2
  • CAPEC-170 Web Application Fingerprinting Likelihood: High · Severity: Low
  • CAPEC-694 System Location Discovery Likelihood: High · Severity: Very Low

The attack patterns MITRE's CAPEC relates to CWE-497, as MITRE names them. Credits.

Ask an AI about CWE-497

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/497.html and https://cve.bz/cve/cwe/497?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 2.3CVE-2026-109823EPSS 0.4%

    An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to…

  2. 7.4CVE-2026-111079EPSS 0.3%

    A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queri…

  3. 5.3CVE-2026-76435EPSS 0.4%

    A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during M…

  4. 7.5CVE-2026-108089EPSS 0.5%Unsupported when assigned

    Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of (verbose) debug loggi…

  5. 5.3CVE-2026-111946EPSS 0.3%

    Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the file_etag option is not set, the ETag is built from the file's inode nu…

  6. 5.3CVE-2026-110466EPSS 0.3%

    Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.

  7. 6.5CVE-2026-97740EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  8. 5.5CVE-2026-96948EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

  9. 5.5CVE-2026-96935EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

  10. 5.6CVE-2026-96865EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

  11. 4.7CVE-2026-85866EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

  12. 5.5CVE-2026-85793EPSS 0.5%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.

  13. 4.7CVE-2026-83925EPSS 0.7%

    Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

  14. 4.7CVE-2026-83909EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  15. 5.5CVE-2026-83907EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

  16. 4.7CVE-2026-83905EPSS 0.7%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

  17. 4.7CVE-2026-83897EPSS 0.7%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  18. 5.5CVE-2026-83893EPSS 0.5%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

  19. 5.5CVE-2026-83835EPSS 0.9%

    Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

  20. 4.7CVE-2026-83774EPSS 0.7%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  21. 5.5CVE-2026-83773EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

  22. 5.5CVE-2026-83713EPSS 0.9%

    Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

  23. 5.5CVE-2026-83705EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

  24. 4.7CVE-2026-83672EPSS 0.7%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

  25. 5.5CVE-2026-70261EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

  26. 5.5CVE-2026-70260EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

  27. 5.5CVE-2026-70232EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

  28. 5.5CVE-2026-70199EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

  29. 5.5CVE-2026-70055EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

  30. 5.5CVE-2026-69644EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.

  31. 5.5CVE-2026-108462EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

  32. 5.3CVE-2026-78356EPSS 0.3%

    The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. Th…

  33. 5.3CVE-2026-66480EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a throu…

  34. 4.3CVE-2026-62036EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows Retrieve Embedded Sensitive Data.This issue affects All Bootstrap Blocks: from n/a through 1…

  35. 7.1CVE-2026-106106EPSS 0.3%

    Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/app-vite 3.3.0, renderSSRError() in utils/render-ssr-error/src/index.js used diagnostic data from uti…

  36. 7.5CVE-2026-102387EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions.

  37. 5.3CVE-2026-105073EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.

  38. 4.3CVE-2026-104401EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from…

  39. 6.9CVE-2026-97181EPSS 0.3%

    GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs.

  40. 5.3CVE-2026-84712EPSS 0.4%

    A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ (ApiV2PingView, AllowAny) over-serializes RBAC-gated automation-mesh data into…

  41. 5.3CVE-2026-95600EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in TrustedLogin Connector <= 2.0.3 versions.

  42. 6.5CVE-2025-33141EPSS 0.4%

    IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.

  43. 6.5CVE-2026-27553EPSS 0.6%

    A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclosure of all user password hashes.

  44. 8.6CVE-2026-38058EPSS 0.5%

    The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with vali…

  45. 4.3CVE-2026-61911EPSS 0.2%

    An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mail…

  46. 5.5CVE-2026-81394EPSS 0.6%

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  47. 5.5CVE-2026-81387EPSS 0.6%

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  48. 7.5CVE-2026-71330EPSS 1.0%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

  49. 4.7CVE-2026-69832EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.

  50. 5.7CVE-2026-69723EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.