cve.bz

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere, page 3

Filter

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

What the weakness is: CWE-497 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 2
  • CAPEC-170 Web Application Fingerprinting Likelihood: High · Severity: Low
  • CAPEC-694 System Location Discovery Likelihood: High · Severity: Very Low

The attack patterns MITRE's CAPEC relates to CWE-497, as MITRE names them. Credits.

Ask an AI about CWE-497

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/497.html and https://cve.bz/cve/cwe/497?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.3CVE-2026-14808EPSS 0.7%

    Prog Management System developed by PROG MIS has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain the database account and password.

  2. 6.9CVE-2026-55726EPSS 0.5%

    The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

  3. 5.3CVE-2026-57753EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions.

  4. 8.7CVE-2026-56124EPSS 0.6%

    phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page of the application. The index mode…

  5. 4.3CVE-2026-57664EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions.

  6. 5.3CVE-2026-57633EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in WCBoost &#8211; Products Compare <= 1.1.0 versions.

  7. 6.5CVE-2026-57316EPSS 0.4%

    Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions.

  8. 7.5CVE-2026-56060EPSS 0.4%

    Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions.

  9. 7.5CVE-2026-54824EPSS 0.4%

    Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions.

  10. 6.3CVE-2026-9307EPSS 0.3%

    A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on t…

  11. 7.5CVE-2026-52694EPSS 0.2%

    Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions.

  12. 7.5CVE-2026-49068EPSS 0.4%

    Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions.

  13. 7.5CVE-2026-49066EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions.

  14. 7.5CVE-2026-49056EPSS 0.4%

    Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions.

  15. 6.5CVE-2026-48878EPSS 0.3%

    Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions.

  16. 6.5CVE-2026-42660EPSS 0.3%

    Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.

  17. 6.5CVE-2026-40796EPSS 0.3%

    Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions.

  18. 7.5CVE-2026-34891EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions.

  19. 4.3CVE-2026-24618EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Hash Elements: from n/a through 1.5.4.

  20. 6.8CVE-2026-0466EPSS 0.1%

    Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.

  21. 3.7CVE-2026-44743EPSS 0.2%

    Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the data. There is no impact on integrity a…

  22. 5.3CVE-2026-49077EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2.

  23. 4.3CVE-2026-44749EPSS 0.3%

    The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Int…

  24. 8.7CVE-2018-25358EPSS 0.6%

    D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the table_name parameter in POST requests. Attackers can send requests to /m…

  25. 4.3CVE-2026-27349EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5.

  26. 4.5CVE-2026-0240EPSS 0.2%

    An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any …

  27. 4.9CVE-2026-0239EPSS 0.2%

    An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information.

  28. 7.5CVE-2026-43654EPSS 0.3%

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An a…

  29. 6.9CVE-2026-7864EPSS 16%

    SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

  30. 6.9CVE-2026-41928EPSS 0.4%

    Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key. Attackers can access the cron controller without authenticati…

  31. 8.6CVE-2026-42047EPSS 0.4%

    Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfilt…

  32. 5.3CVE-2026-25468EPSS 0.3%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8.

  33. 5.3CVE-2026-42644EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a through <= 4.3.10.

  34. 8.6CVE-2026-24222EPSS 0.4%

    NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host …

  35. 5.3CVE-2026-41339EPSS 0.3%

    OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specific filesystem paths and deployment details, enabling host f…

  36. 6.9CVE-2026-41335EPSS 0.3%

    OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers can extract sensitive fingerprinting information from the Co…

  37. 6.9CVE-2026-41459ExploitEPSS 0.8%

    Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side filesystem path of the application root. Attackers can send a GET reques…

  38. 8.8CVE-2026-34413ExploitEPSS 3.1%

    Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where an HTTP redirect to unauthenticated callers does not call exit() …

  39. 9.3CVE-2025-15623EPSS 0.3%

    Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retri…

  40. 5.3CVE-2026-39686EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through <= 3.7.2.

  41. 4.3CVE-2026-39572EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue…

  42. 5.3CVE-2026-39571EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themefic Instantio instantio allows Retrieve Embedded Sensitive Data.This issue affects Instantio: from n/a through <= 3.3.30.

  43. 4.3CVE-2026-39566EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Designinvento DirectoryPress directorypress allows Retrieve Embedded Sensitive Data.This issue affects DirectoryPress: from n/a through <= 3.6.26.

  44. 5.3CVE-2026-39536EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through <= 2…

  45. 5.3CVE-2026-39516EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through …

  46. 4.3CVE-2026-39469EPSS 0.2%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through <= 2.0.8.

  47. 5.3CVE-2026-33617EPSS 0.3%

    An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.

  48. 6.8CVE-2025-36373EPSS 0.3%

    IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information…

  49. 6.5CVE-2026-25344EPSS 0.3%

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through <= 2.2.6.

  50. 4.3CVE-2026-20691EPSS 0.3%

    An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the …