CWE-203

Observable Discrepancy

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

751 vulnerabilities with CWE-203
CVE-2024-0564 MEDIUM
Linux kernel <4.4.0-96.119 - Info Disclosure
CVSS 5.3
CVE-2024-22647 MEDIUM
SEO Panel 4.10.0 - User Enumeration via Authentication Error Message Discrepancy
CVSS 5.3
CVE-2024-23218 MEDIUM
Apple iOS iPadOS macOS tvOS watchOS - Timing Side-Channel in RSA PKCS#1 v1.5 Decryption
CVSS 5.9
CVE-2024-23342 HIGH
ecdsa < 0.18.0 - Covert Timing Channel
CVSS 7.4
CVE-2024-21484 HIGH
jsrsasign < 11.0.0 - Observable Discrepancy via RSA PKCS1.5 or RSAOAEP Decryption
CVSS 7.5
CVE-2024-23771 CRITICAL
darkhttpd < 1.15 - Timing Side-Channel Authentication Bypass via strcmp
CVSS 9.8
CVE-2024-0553 HIGH
GnuTLS - Timing Side-Channel Attack
CVSS 7.5
CVE-2023-54357 HIGH
Joomla com_booking 2.4.9 Information Disclosure via Account Enumeration
CVSS 7.5
CVE-2023-5872 MEDIUM
Wago: Vulnerability in Smart Designer Web-Application
CVSS 4.3
CVE-2023-53943 MEDIUM
GLPI 9.5.7 - Username Enumeration via Lost Password Endpoint
CVSS 5.3
CVE-2023-38327 MEDIUM
eGroupWare 17.1.20190111 - Info Disclosure
CVSS 5.3
CVE-2023-37482 MEDIUM
SIMATIC Drive Controller CPU 1504D TF 3.1.0-3.1.1 - Unauthenticated Username Enumeration via Login Timing Side Channel
CVSS 5.3
CVE-2023-37413 MEDIUM
IBM Aspera Faspex 5.0.0-5.0.10 - Username Information Disclosure via Observable Response Discrepancy
CVSS 5.3
CVE-2023-47159 MEDIUM
IBM Sterling File Gateway 6.0.0.0-6.1.2.5 & 6.2.0.0-6.2.0.1 Username Enumeration via Response Discrepancy
CVSS 4.3
CVE-2023-36325 LOW
i2p < 2.3.0 - Observable Discrepancy via Replayed Tunneled Message
CVSS 3.7
CVE-2023-30312 HIGH
OpenWrt 18.06-22.03 - TCP Session Hijacking via nf_conntrack_tcp_no_window_check
CVSS 7.3
CVE-2023-30308 MEDIUM
Ruijie EG210G-P, EG105G-V2, NBR, and EG105G Firmware - TCP Session Hijacking via Sequence Number Leakage
CVSS 6.5
CVE-2023-27283 MEDIUM
IBM Aspera Orchestrator 4.0.1 - Info Disclosure
CVSS 5.3
CVE-2023-5388 MEDIUM
Firefox < 124 and ESR < 115.9 - Timing Side-Channel Attack via RSA Decryption
CVSS 6.5
CVE-2023-5410 HIGH
HP PC BIOS - Memory Tampering via System BIOS
CVSS 8.2
CVE-2023-38362 MEDIUM
IBM CICS TX Advanced 10.1 - Info Disclosure
CVSS 5.3
CVE-2023-50306 MEDIUM
IBM Common Licensing 9.0 - Username Enumeration via Observable Response Discrepancy
CVSS 4.0
CVE-2023-6935 MEDIUM
wolfSSL 3.12.2-5.6.3 - Timing Attack via Static RSA Cipher Suites
CVSS 5.9
CVE-2023-51437 HIGH
Apache Pulsar <2.11.3, 3.0.2, 3.1.1 - Code Injection
CVSS 7.4
CVE-2023-50782 HIGH
Python-cryptography - Info Disclosure
CVSS 7.5
Details
Vulnerabilities 751
Links
MITRE CWE Entry Search this CWE With Exploits