CWE-668: Exposure of Resource to Wrong Sphere, page 11
Filter
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
What the weakness is: CWE-668 at MITRE
Ask an AI about CWE-668
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-668: Exposure of Resource to Wrong Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/668.html and https://cve.bz/cve/cwe/668?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.8CVE-2021-22568EPSS 0.9%
When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an atta…
- 6.5CVE-2021-38505EPSS 1.1%
Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it available on other computers in certain scenarios. Applications that wish to pr…
- 3.3CVE-2021-25515EPSS 0.1%
An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID.
- 5.3CVE-2021-29115EPSS 2.2%
An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but n…
- 7.5CVE-2021-36198EPSS 1.1%
Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.
- 9.1CVE-2021-23264EPSS 1.2%
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
- 7.5CVE-2021-23263EPSS 1.7%
Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (non-binary).
- 4.3CVE-2021-38004EPSS 0.9%
Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- 5.3CVE-2021-43560EPSS 1.1%
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.
- 3.3CVE-2021-36319EPSS 0.2%
Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP authentication failure messages.
- 7.8CVE-2021-42254EPSS 0.3%
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions.
- 5.5CVE-2021-26327EPSS 0.2%
Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.
- 5.5CVE-2021-26312EPSS 0.2%
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
- 5.5CVE-2020-12488EPSS 0.2%
The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission.
- 5.3CVE-2021-22047EPSS 0.8%
In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally expo…
- 7.5CVE-2021-22044EPSS 1.1%
In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign client interfaces, can be involuntarily exposing endpoints corr…
- 3.3CVE-2021-22468EPSS 0.2%
A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage.
- 5.5CVE-2021-22454EPSS 0.1%
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump.
- 6.0CVE-2021-34761EPSS 0.2%
A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using root-level privileges. The attacker must have administrative credenti…
- 6.5CVE-2021-42536EPSS 0.9%
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.
- 8.6CVE-2020-11303EPSS 0.7%
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industr…
- 5.3CVE-2021-41140EPSS 0.9%
Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affected versions reactions given by user to secure topics and private messages are visible. This issue is patched in versio…
- 8.6CVE-2021-39184EPSS 1.1%
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a "thumbnail" image of an arbitr…
- 5.3CVE-2021-40497EPSS 0.9%
SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation coul…
- 4.3CVE-2021-40496EPSS 0.9%
SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit the authentication function by using POST and form field to…
- 7.5CVE-2020-28145EPSS 1.3%
Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app\attachment\admin\index.php, which allows attackers to access sensitive information.
- 7.5CVE-2020-21503EPSS 1.1%
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.
- 4.6CVE-2021-41094EPSS 0.2%
Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating e…
- 9.8CVE-2021-22869EPSS 1.2%
An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to execute in a self-hosted runner group it should not have had access to. This affects customers using self-hosted runner groups for access contro…
- 8.8CVE-2021-41088EPSS 0.5%
Elvish is a programming language and interactive shell, combined into one package. In versions prior to 0.14.0 Elvish's web UI backend (started by `elvish -web`) hosts an endpoint that allows executing the code sent from the web UI. The ba…
- 7.5CVE-2021-22009EPSS 1.4%
The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to create a denial of service condition due …
- 6.7CVE-2021-34723EPSS 0.2%
A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due …
- 5.3CVE-2020-14130EPSS 0.7%
Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809
- 7.5CVE-2021-40639EPSS 1.2%
Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.
- 8.8CVE-2020-19155EPSS 7.5%
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' function in the component 'modules/filemanager/FileManagerControl…
- 7.5CVE-2021-23034EPSS 0.9%
On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate.…
- 3.6CVE-2021-39212EPSS 0.4%
ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript …
- 6.5CVE-2021-28568EPSS 0.6%
Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the …
- 7.3CVE-2021-36002EPSS 0.5%
Adobe Captivate version 11.5.5 (and earlier) is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must…
- 5.5CVE-2020-18972EPSS 0.8%
Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'.
- 5.5CVE-2021-30921EPSS 0.3%
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible onscreen.
- 6.1CVE-2021-28633EPSS 0.5%
Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the conte…
- 6.4CVE-2021-29280EPSS 0.8%
In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow
- 7.5CVE-2021-38712EPSS 1.1%
OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via an NGINX configuration file.
- 7.5CVE-2020-18754EPSS 1.3%
An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100.
- 4.3CVE-2021-37704ExploitEPSS 5.9%
PhpFastCache is a high-performance backend cache system (packagist package phpfastcache/phpfastcache). In versions before 6.1.5, 7.1.2, and 8.0.7 the `phpinfo()` can be exposed if the `/vendor` is not protected from public access. This is …
- 7.8CVE-2021-22385EPSS 0.2%
A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.
- 5.3CVE-2020-21356EPSS 0.9%
An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads.
- 7.8CVE-2021-22420EPSS 0.2%
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause the underlying trust of the application trustlist mechanism is missing..
- 4.3CVE-2021-32788EPSS 0.9%
Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal mess…