CWE-668: Exposure of Resource to Wrong Sphere, page 4
Filter
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
What the weakness is: CWE-668 at MITRE
Ask an AI about CWE-668
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-668: Exposure of Resource to Wrong Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/668.html and https://cve.bz/cve/cwe/668?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2021-46935EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: binder: fix async_free_space accounting for empty parcels In 4.13, commit 74310e06be4d ("android: binder: Move buffer out of area shared with user space") fixed a kernel…
- 5.5CVE-2021-46923EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make sure that finish_mount_kattr() is called after mount_kattr was succesfully built in both the success and failure case t…
- 5.5CVE-2021-46921EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queued_write_lock_slowpath() While this code is executed with the wait_lock held, a reader can acquire the lock without holding wait_loc…
- 5.5CVE-2021-46917EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workaround where wq reset does not clear WQCFG registers was leaked into upstream code. …
- 5.5CVE-2021-46906EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak in hid_submit_ctrl In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. Whe…
- 7.5CVE-2023-7014EPSS 0.7%
The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'ma_debu' parameter. This makes it possible for …
- 5.3CVE-2023-50328EPSS 0.5%
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110.
- 8.6CVE-2024-21626ExploitEPSS 19%
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc e…
- 7.5CVE-2023-7204EPSS 0.6%
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides
- 7.5CVE-2024-21597EPSS 0.4%
An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abst…
- 5.5CVE-2024-0443EPSS 0.2%
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), whi…
- 5.5CVE-2024-20694EPSS 0.9%
Windows CoreMessaging Information Disclosure Vulnerability
- 5.7CVE-2024-20692EPSS 1.2%
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- 4.3CVE-2023-48291EPSS 1.8%
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs th…
- 7.8CVE-2023-49347EPSS 0.3%
Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attacker…
- 7.8CVE-2023-49346EPSS 0.3%
Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attack…
- 7.8CVE-2023-49345EPSS 0.3%
Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attacke…
- 7.8CVE-2023-49344EPSS 0.3%
Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. At…
- 7.8CVE-2023-49343EPSS 0.3%
Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers m…
- 7.8CVE-2023-49342EPSS 0.3%
Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attacke…
- 6.5CVE-2023-41120EPSS 0.5%
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It permits an authenticated user to use DBMS_PROFILER to remov…
- 7.2CVE-2023-39171EPSS 1.1%
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.
- 5.5CVE-2023-42718EPSS 0.1%
In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
- 7.5CVE-2023-42717EPSS 0.4%
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
- 7.5CVE-2023-42716EPSS 0.4%
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
- 5.5CVE-2023-42715EPSS 0.1%
In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
- 6.5CVE-2023-41786EPSS 0.5%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery. This vulnerability allows users with low privileges to download database backups. This issue affects Pandora FMS: from 70…
- 6.5CVE-2023-36013EPSS 1.4%
PowerShell Information Disclosure Vulnerability
- 6.5CVE-2023-36043EPSS 1.4%
Open Management Infrastructure Information Disclosure Vulnerability
- 5.3CVE-2023-5545EPSS 0.6%
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
- 4.3CVE-2023-5542EPSS 0.5%
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
- 6.5CVE-2023-42551EPSS 0.4%
Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
- 6.5CVE-2023-42549EPSS 0.4%
Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
- 6.5CVE-2023-42547EPSS 0.4%
Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
- 6.5CVE-2023-42546EPSS 0.4%
Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
- 5.5CVE-2023-4910EPSS 0.2%
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.
- 5.3CVE-2023-4217EPSS 0.3%
A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user sess…
- 7.8CVE-2023-3972EPSS 0.3%
A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been…
- 4.3CVE-2023-2622EPSS 0.4%
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have a…
- 7.8CVE-2023-38994EPSS 0.3%
The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privile…
- 6.5CVE-2023-37911EPSS 0.9%
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, when a document has been deleted and re-created, it is possi…
- 3.6CVE-2023-45145EPSS 0.4%
Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition …
- 9.8CVE-2023-45911EPSS 1.0%
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password.
- 6.5CVE-2023-45357EPSS 0.6%
Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtain access to sensitive information via a popup warning message. 6.14 (6.14.0) is…
- 4.3CVE-2023-44394EPSS 0.7%
MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by accessing wiki.php with sequentially incremented IDs. This issue has been address…
- 4.4CVE-2023-35013EPSS 0.2%
IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769.
- 6.5CVE-2023-42792EPSS 1.9%
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs th…
- 4.4CVE-2023-32275EPSS 0.4%
An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets…
- 5.3CVE-2023-44102EPSS 0.4%
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable.
- 7.5CVE-2023-44101EPSS 0.4%
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.