CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
baseThe product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (458)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22963US | critical9.8OT critical | KEV | ||
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r… | ||||
| CVE-2021-31955US | low2.1OT critical | KEV | ||
Windows Kernel Information Disclosure Vulnerability | ||||
| CVE-2025-44823US | high8.8 | Exploit | ||
Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:… | ||||
| CVE-2024-5735US | high7.5 | Exploit | ||
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue aff… | ||||
| CVE-2026-27494US | critical9.9 | — | ||
n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the… | ||||
| CVE-2025-34442US | high7.5 | Exploit | ||
AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlyin… | ||||
| CVE-2024-13999US | critical9.8 | — | ||
Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user. Exposure of… | ||||
| CVE-2020-25179US | critical9.8 | — | ||
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network. | ||||
| CVE-2025-0061US | critical9.1 | — | ||
SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an informat… | ||||
| CVE-2026-0240US | high8.7 | — | ||
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploit… | ||||
| CVE-2024-13995US | high8.8 | — | ||
Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account information (including API keys and hashed passwords) to authentic… | ||||
| CVE-2025-9364US | high8.8 | — | ||
An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet… | ||||
| CVE-2024-8382US | high8.8 | — | ||
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces w… | ||||
| CVE-2024-4008US | high8.8 | — | ||
FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System | ||||
| CVE-2022-1902US | high8.8 | — | ||
A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users… | ||||
| CVE-2024-45440US | medium5.3 | Exploit | ||
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist. | ||||
| CVE-2023-32550US | high8.2 | — | ||
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the… | ||||
| CVE-2025-55183US | — | Exploit | ||
An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the foll… | ||||
| CVE-2026-80119US | high7.8 | — | ||
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in Direct… | ||||
| CVE-2025-34171US | medium5.3OT elevated | Exploit | ||
CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug informat… | ||||
04
attack patterns (2)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan