cve.bz

CWE-668: Exposure of Resource to Wrong Sphere, page 7

Filter

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

What the weakness is: CWE-668 at MITRE

Ask an AI about CWE-668

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-668: Exposure of Resource to Wrong Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/668.html and https://cve.bz/cve/cwe/668?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2023-24870EPSS 1.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  2. 6.5CVE-2023-24866EPSS 1.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  3. 6.5CVE-2023-24863EPSS 1.5%

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  4. 5.5CVE-2023-23409EPSS 0.5%

    Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

  5. 5.5CVE-2023-23394EPSS 0.5%

    Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

  6. 7.5CVE-2023-25802EPSS 1.0%

    Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't correctly neutralize `dir/../filename` sequences, such as `/etc/nginx/../passwd`, allowing an actor to gain information…

  7. 7.5CVE-2023-22892EPSS 0.6%

    There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.

  8. 4.3CVE-2022-46257EPSS 0.6%

    An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a user who did not have access to those repositories, resultin…

  9. 6.5CVE-2023-20061EPSS 0.7%

    Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to relea…

  10. 6.7CVE-2023-25536EPSS 0.1%

    Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system t…

  11. 6.5CVE-2023-25544EPSS 0.5%

    Dell NetWorker versions 19.5 and earlier contain 'Apache Tomcat' version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and may launch target-specific at…

  12. 6.5CVE-2023-24567EPSS 0.5%

    Dell NetWorker versions 19.5 and earlier contain 'RabbitMQ' version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and may launch target-specific attacks.

  13. 6.5CVE-2023-22777EPSS 0.6%

    An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.

  14. 6.5CVE-2023-22775EPSS 0.6%

    A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privile…

  15. 4.3CVE-2023-26041EPSS 0.8%

    Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. I…

  16. 5.5CVE-2023-23501EPSS 0.2%

    The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app may be able to disclose kernel memory.

  17. 2.7CVE-2023-27265EPSS 0.5%

    Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the "Regenerate Invite Id" API endpoint, allowing an attacker with team admin privileges to learn the team owner's email address in the response.

  18. 7.5CVE-2022-44310EPSS 0.7%

    In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

  19. 3.3CVE-2023-0481EPSS 0.2%

    In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

  20. 7.5CVE-2023-26081EPSS 1.2%

    In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts.

  21. 9.8CVE-2022-39952ExploitEPSS 99.7%

    A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated …

  22. 5.3CVE-2023-25192EPSS 0.5%

    AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00.

  23. 5.5CVE-2023-21714EPSS 0.6%

    Microsoft Office Information Disclosure Vulnerability

  24. 5.5CVE-2023-21687EPSS 0.5%

    HTTP.sys Information Disclosure Vulnerability

  25. 8.8CVE-2023-24523EPSS 0.2%

    An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22, can submit a crafted ConfigureOutsideDiscovery request with an operating system command …

  26. 7.8CVE-2022-34387EPSS 0.2%

    Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability. A local authenticated malicious user could potentially exploit this vuln…

  27. 4.4CVE-2022-34364EPSS 0.2%

    Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user. .

  28. 8.1CVE-2022-4903EPSS 0.7%

    A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remo…

  29. 2.7CVE-2022-34452EPSS 0.4%

    PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can able to exploit the issue and view sensitive information stored in the logs.

  30. 3.3CVE-2023-21447EPSS 0.1%

    Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent.

  31. 7.8CVE-2023-21445EPSS 0.2%

    Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

  32. 2.4CVE-2023-21438EPSS 0.2%

    Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by Secure Folder.

  33. 6.7CVE-2022-46756EPSS 0.2%

    Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlyin…

  34. 7.5CVE-2022-22732EPSS 0.3%

    A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. …

  35. 5.3CVE-2022-26329EPSS 0.5%

    File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Man…

  36. 7.8CVE-2021-41989EPSS 0.3%

    Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.

  37. 7.8CVE-2021-41988EPSS 0.3%

    Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.

  38. 7.8CVE-2023-21611EPSS 0.4%

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in pri…

  39. 5.3CVE-2022-45438EPSS 1.3%

    When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to access dashboard configuration metadata using a REST API Get endpoint. This issue affects Apache Superset ve…

  40. 9.1CVE-2023-22497EPSS 0.7%

    Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it w…

  41. 5.5CVE-2022-24913EPSS 0.3%

    Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, …

  42. 5.5CVE-2021-26343EPSS 0.2%

    Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.

  43. 4.7CVE-2023-21536EPSS 0.4%

    Event Tracing for Windows Information Disclosure Vulnerability

  44. 9.8CVE-2018-25068EPSS 0.8%

    A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileres…

  45. 5.5CVE-2022-45935EPSS 0.4%

    Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue…

  46. 6.5CVE-2022-0337EPSS 1.4%

    Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)

  47. 9.8CVE-2022-48198EPSS 1.2%

    The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a…

  48. 7.8CVE-2022-4817EPSS 0.6%

    A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patc…

  49. 7.5CVE-2015-10004EPSS 0.8%

    Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection, an attacker may use this to determine the expected HMAC.

  50. 5.3CVE-2019-9011EPSS 0.5%

    In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames.