CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
333 vulnerabilities with CWE-497
CVE-2024-52367
MEDIUM
IBM Concert Software <1.0.4 - Info Disclosure
CVSS 5.3
CVE-2024-12993
MEDIUM
Infinix Mobile com.rlk.weathers - Unauthenticated Exposure of Sensitive Location Data via Unsecured Content Provider
CVE-2024-52321
MEDIUM
Sharp home 5G HR02 < S5.82.00 - Unauthenticated Exposure of Sensitive System Information via Configuration Backup
CVSS 5.9
CVE-2024-54279
HIGH
WP-NERD Toolkit <= 1.1 - Sensitive System Information Exposure
CVSS 7.5
CVE-2024-32732
MEDIUM
SAP BusinessObjects - Info Disclosure
CVSS 5.3
CVE-2024-53814
MEDIUM
Analytify < 5.4.3 - Exposure of Sensitive System Information
CVSS 6.5
CVE-2024-53867
MEDIUM
matrix-synapse 1.113.0rc1-1.120.0 - Exposure of Sensitive Room State Information via Sliding Sync
CVSS 4.3
CVE-2024-25035
MEDIUM
IBM Cognos Controller <11.0.2 - Info Disclosure
CVSS 5.3
CVE-2024-53768
MEDIUM
IDE Interactive Content Audit Exporter <1.1 - Info Disclosure
CVSS 5.3
CVE-2024-22037
MEDIUM
uyuni-server-attestation - Info Disclosure
CVSS 5.5
CVE-2024-10240
MEDIUM
GitLab EE <17.3.7-17.5.2 - Info Disclosure
CVSS 5.3
CVE-2024-9929
MEDIUM
Hitachi Energy NSD570 <1.20 Authenticated Sensitive Info Exposure via Logs
CVSS 4.3
CVE-2024-41781
MEDIUM
IBM PowerVM Hypervisor - Info Disclosure
CVSS 5.1
CVE-2024-52033
MEDIUM
Rakuten Turbo 5G <V1.3.18 - Info Disclosure
CVSS 5.3
CVE-2024-37070
MEDIUM
IBM Concert Software <1.0.3 - Info Disclosure
CVSS 4.3
CVE-2024-52582
MEDIUM
Cachi2 < 0.14.0 - Exposure of Sensitive System Information via Exception Logging
CVSS 4.7
CVE-2024-36509
MEDIUM
FortiWeb 6.3.0-6.3.23, 7.0.0-7.0.10, 7.2.0-7.2.10, 7.4.0-7.4.3, 7.6.0 - Sensitive Info Exposure via Log Access
CVSS 4.2
CVE-2024-47799
LOW
Mesh Wi-Fi router RP562B <v1.0.2 - Info Disclosure
CVSS 3.5
CVE-2024-50528
HIGH
Stacks Mobile App Builder <5.2.3 - Info Disclosure
CVSS 7.5
CVE-2024-50425
MEDIUM
WP Booking System <= 2.0.19.10 - Exposure of Sensitive System Information
CVSS 6.5
CVE-2024-48024
HIGH
Fahad Mahmood Keep Backup Daily <2.0.7 - Info Disclosure
CVSS 7.5
CVE-2024-49252
MEDIUM
Leyka <= 3.31.6 - Exposure of Sensitive System Information
CVSS 5.3
CVE-2024-9470
MEDIUM
Cortex XSOAR 6.12.0-6.12.0 (Build 1271551), 6.13.0+, 8.0.0+ - Unauthorized Incident Data Exposure
CVE-2024-6389
MEDIUM
GitLab-CE/EE <17.1.7, <17.2.5, <17.3.2 - Info Disclosure
CVSS 4.3
CVE-2024-8687
HIGH
Palo Alto Networks PAN-OS - Info Disclosure
CVSS 7.1
Details
Vulnerabilities
333