CWE-210 Self-generated Error Message Containing Sensitive Information
baseThe product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
Schwachstellen (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-41027US | high8.8 | — | ||
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the passwo… | ||||
| CVE-2018-19947US | medium6.5 | — | ||
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has al… | ||||
| CVE-2018-6296US | medium5.3 | — | ||
An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams | ||||
| CVE-2021-40126US | medium4.3 | — | ||
A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructur… | ||||
| CVE-2026-73844US | — | — | ||
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller… | ||||
03
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan