CWE-530 Exposure of Backup File to an Unauthorized Control Sphere
variantA backup file is stored in a directory or archive that is made accessible to unauthorized actors.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (13)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-7667US | critical9.8OT elevated | — | ||
Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker can use brute force to identify the datab… | ||||
| CVE-2024-56462US | high8.8 | — | ||
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain access to the underly… | ||||
| CVE-2020-36899US | high7.5 | — | ||
QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename… | ||||
| CVE-2023-5297US | high7.5 | — | ||
A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation l… | ||||
| CVE-2025-3773US | medium5.5 | — | ||
A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information s… | ||||
| CVE-2024-2364US | medium4.6 | — | ||
A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup H… | ||||
| CVE-2026-13514US | — | — | ||
A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.… | ||||
| CVE-2026-2974US | — | — | ||
A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file shared_prefs/aliasvault.xml of the component Backu… | ||||
| CVE-2024-12330US | — | — | ||
The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin… | ||||
| CVE-2024-3430US | — | — | ||
A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Back… | ||||
| CVE-2024-3128US | — | — | ||
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in Replify-Messenger 1.0 on Android. This issue affects some unknown processing… | ||||
| CVE-2024-3124US | — | — | ||
A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Bac… | ||||
| CVE-2024-2567US | — | — | ||
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function o… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan