CWE-203

Observable Discrepancy

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

751 vulnerabilities with CWE-203
CVE-2021-44876 MEDIUM
Dalmark Systems Systeam 2.22.8 build 1724 - User Enumeration via Tenant Identification Message Discrepancy
CVSS 5.3
CVE-2021-44875 MEDIUM
Dalmark Systems Systeam 2.22.8 build 1724 - User Enumeration via Password Recovery Message Discrepancy
CVSS 5.3
CVE-2021-44554 MEDIUM
Thinfinity VirtualUI < 3.0 - User Enumeration via ChangePassword URI
CVSS 5.3
CVE-2021-1032 LOW
Android - Local Information Disclosure via PackageManagerService MIME Group Query
CVSS 3.3
CVE-2021-1031 LOW
Android - Local Information Disclosure via Notification Listener Side Channel
CVSS 3.3
CVE-2021-1030 MEDIUM
Android 12 - Local Information Disclosure via Notification Side Channel
CVSS 5.5
CVE-2021-1026 MEDIUM
Android 12 - Unauthenticated Local Information Disclosure via RttServiceImpl Side Channel
CVSS 5.5
CVE-2021-1018 LOW
Android 12 - Unauthenticated Local Information Disclosure via AudioService Volume Adjustment
CVSS 3.3
CVE-2021-1015 LOW
Android 12 - Unauthenticated Local Information Disclosure via Side Channel in PhoneInterfaceManager
CVSS 3.3
CVE-2021-1014 MEDIUM
Android - Local Information Disclosure via Side Channel in PhoneInterfaceManager
CVSS 5.5
CVE-2021-1013 MEDIUM
Android 12 - Unauthenticated App Installation Status Disclosure via Permission Check Side Channel
CVSS 5.5
CVE-2021-1012 MEDIUM
Android 12 - Local Information Disclosure via NotificationAccessDetails Side Channel
CVSS 5.5
CVE-2021-1009 MEDIUM
Android 12 - Unauthenticated App Installation Status Disclosure via PackageManagerService Side Channel
CVSS 5.5
CVE-2021-1005 MEDIUM
Android 12 - Unauthenticated Local Information Disclosure via Side Channel in PhoneInterfaceManager
CVSS 5.5
CVE-2021-0995 LOW
Android 12 - Unauthenticated App Installation Status Disclosure via WifiServiceImpl Side Channel
CVSS 3.3
CVE-2021-0990 LOW
Android - Local Information Disclosure via Side Channel in PhoneSubInfoController
CVSS 3.3
CVE-2021-0989 LOW
Android 12 - Local Information Disclosure via TelecomServiceImpl Side Channel
CVSS 3.3
CVE-2021-0988 LOW
Android - Local Information Disclosure via Side Channel in ActivityClientController
CVSS 3.3
CVE-2021-0987 LOW
Android - Local Information Disclosure via Side Channel in PhoneInterfaceManager
CVSS 3.3
CVE-2021-43823 MEDIUM
Sourcegraph <3.33.2 - Info Disclosure
CVSS 6.5
CVE-2021-44848 MEDIUM
Thinfinity VirtualUI < 3.0 - User Enumeration via Password Change Response Discrepancy
CVSS 5.3
CVE-2021-1924 CRITICAL
Qualcomm APQ8009 and related firmware - Information Disclosure via RSA-CRT Mod Exponentiation Side-Channel
CVSS 9.0
CVE-2021-43398 MEDIUM
Crypto++ < 8.6.0 - Timing Side-Channel in MakePublicKey()
CVSS 5.3
CVE-2021-34580 HIGH
mbconnect24 and mymbconnect24 <= 2.9.0 - Unauthenticated User Enumeration via Login Response Discrepancy
CVSS 7.5
CVE-2021-38476 MEDIUM
InHand Networks IR615 Router <2.3.0.r4870 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities 751
Links
MITRE CWE Entry Search this CWE With Exploits