cve.bz

CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory, page 3

Filter

The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.

What the weakness is: CWE-538 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-95 WSDL Scanning Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-538, as MITRE names them. Credits.

Ask an AI about CWE-538

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/538.html and https://cve.bz/cve/cwe/538?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2018-11798EPSS 4.7%

    The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

  2. 4.3CVE-2018-16970EPSS 0.7%

    Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

  3. 3.3CVE-2017-5387EPSS 0.4%

    The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a "<track>" tag refers to a file that does not exist if the source page is loaded locally. This vuln…

  4. 7.5CVE-2018-10590EPSS 1.6%

    In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an information …

  5. 4.6CVE-2018-4847EPSS 0.3%

    A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection of sensitive information (e.g. session key for accessing server) in Siemens WinCC OA Operator iOS app could allow an at…

  6. 6.5CVE-2017-16770EPSS 1.8%

    File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the fi…

  7. 5.3CVE-2017-9947EPSS 8.2%

    A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server …

  8. 7.5CVE-2016-10399EPSS 1.4%

    Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL.

  9. –CVE-2014-0772EPSS 1.4%

    The BWOCXRUN.BwocxrunCtrl.1 control contains a method named OpenUrlToBufferTimeout. This method takes a URL as a parameter and returns its contents to the caller in JavaScript. The URLs are accessed in the security context of the curren…

  10. –CVE-2014-0771EPSS 1.4%

    The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “OpenUrlToBuffer.” This method takes a URL as a parameter and returns its contents to the caller in JavaScript. The URLs are accessed in the security context of the current bro…

  11. 5.5CVE-2012-4574EPSS 0.4%

    A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could …