CWE-219 Storage of File with Sensitive Data Under Web Root
variantThe product stores sensitive data under the web document root with insufficient access control, which might make it accessible to untrusted parties.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (7)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-21236US | high7.5 | — | ||
An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a disc… | ||||
| CVE-2024-39776US | high7.5 | — | ||
Avtec Outpost stores sensitive information in an insecure location without proper access controls in place. | ||||
| CVE-2022-36306US | medium6.5 | — | ||
An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configur… | ||||
| CVE-2024-56159US | medium5.3 | — | ||
Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. During build, along with c… | ||||
| CVE-2002-2024US | medium5.0 | — | ||
Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ld… | ||||
| CVE-2026-45140US | — | Exploit | ||
Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authori… | ||||
| CVE-2023-39467US | — | — | ||
Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected in… | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan