CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
368 vulnerabilities with CWE-497
CVE-2024-52905
LOW
IBM Sterling B2B Integrator <6.1.2.6, <6.2.0.3 - Info Disclosure
CVSS 2.7
CVE-2024-11035
LOW
Carbon Black Cloud Windows Sensor <4.0.3 - Info Disclosure
CVSS 2.5
CVE-2024-8550
HIGH
modelscope/agentscope v0.0.4 - Local File Inclusion via /load-workflow Endpoint Filename Parameter
CVSS 7.5
CVE-2024-36554
CRITICAL
Forever KidsWatch - Info Disclosure
CVSS 9.8
CVE-2024-37526
MEDIUM
IBM Watson Query on Cloud Pak for Data 1.8-3.0.0 Sensitive Information Exposure
CVSS 6.5
CVE-2024-40706
MEDIUM
IBM InfoSphere Information Server 11.7 - Info Disclosure
CVSS 5.3
CVE-2024-53683
MEDIUM
Ossur Mobile Logic Application < 1.5.5 - Exposure of Sensitive Credentials in JavaScript File
CVSS 4.4
CVE-2024-11029
MEDIUM
Red Hat Enterprise Linux 9 - Exposure of Sensitive System Information via FreeIPA API Audit
CVSS 5.5
CVE-2024-45640
MEDIUM
IBM Security ReaQta <3.12 - Info Disclosure
CVSS 5.3
CVE-2024-52367
MEDIUM
IBM Concert Software <1.0.4 - Info Disclosure
CVSS 5.3
CVE-2024-12993
MEDIUM
Infinix Mobile com.rlk.weathers - Unauthenticated Exposure of Sensitive Location Data via Unsecured Content Provider
CVE-2024-52321
MEDIUM
Sharp home 5G HR02 < S5.82.00 - Unauthenticated Exposure of Sensitive System Information via Configuration Backup
CVSS 5.9
CVE-2024-54279
HIGH
WP-NERD Toolkit <= 1.1 - Sensitive System Information Exposure
CVSS 7.5
CVE-2024-32732
MEDIUM
SAP BusinessObjects - Info Disclosure
CVSS 5.3
CVE-2024-53814
MEDIUM
Analytify < 5.4.3 - Exposure of Sensitive System Information
CVSS 6.5
CVE-2024-53867
MEDIUM
matrix-synapse 1.113.0rc1-1.120.0 - Exposure of Sensitive Room State Information via Sliding Sync
CVSS 4.3
CVE-2024-25035
MEDIUM
IBM Cognos Controller <11.0.2 - Info Disclosure
CVSS 5.3
CVE-2024-53768
MEDIUM
IDE Interactive Content Audit Exporter <1.1 - Info Disclosure
CVSS 5.3
CVE-2024-22037
MEDIUM
uyuni-server-attestation - Info Disclosure
CVSS 5.5
CVE-2024-10240
MEDIUM
GitLab EE <17.3.7-17.5.2 - Info Disclosure
CVSS 5.3
CVE-2024-9929
MEDIUM
Hitachi Energy NSD570 <1.20 Authenticated Sensitive Info Exposure via Logs
CVSS 4.3
CVE-2024-41781
MEDIUM
IBM PowerVM Hypervisor - Info Disclosure
CVSS 5.1
CVE-2024-52033
MEDIUM
Rakuten Turbo 5G <V1.3.18 - Info Disclosure
CVSS 5.3
CVE-2024-37070
MEDIUM
IBM Concert Software <1.0.3 - Info Disclosure
CVSS 4.3
CVE-2024-52582
MEDIUM
Cachi2 < 0.14.0 - Exposure of Sensitive System Information via Exception Logging
CVSS 4.7
Details
Vulnerabilities
368