Exposure of Sensitive Information to an Unauthorized Actor
CWE-200
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
We track 1,371 vulnerabilities of this type. 99% are rated high or critical, and the average CVSS score is 7.9. 18 have been exploited in real attacks.
How this weakness is prevented
- Architecture and Design: Compartmentalize the system to have safe areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Latest Exposure of Sensitive Information to an Unauthorized Actor vulnerabilities
- 7.5 High severity
vite: Exposure of Sensitive Information to an Unauthorized Actor
Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. `@fs` denies access to files outside of Vite serving allow list. Adding `?raw??` or `?import&raw??` to the URL bypasses this li
- 7.5 High severity
Applio: Improper Limitation of a Pathname to a Restricted Directory
Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_index` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind s
- 7.5 High severity
Applio: Exposure of Sensitive Information to an Unauthorized Actor
Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_pth` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind ser
- 7.5 High severity
Server: Insufficiently Protected Credentials
Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking.
- 8.1 High severity
FortiSIEM: Exposure of Sensitive Information to an Unauthorized Actor
An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and
- 8.2 High severity
umatiGateway: Exposure of Sensitive Information to an Unauthorized Actor
umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration c
- 7.5 High severity
application-confluence-migrator-pro: Exposure of Sensitive Information to an Unauthorized Actor
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed i
- 7.5 High severity
QTS: Exposure of Sensitive Information to an Unauthorized Actor
An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS
- 7.5 High severity
Academia Student Information System: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information.
- 7.5 High severity
Better Messages – Live Chat, Chat Rooms…: Exposure of Sensitive Information to an Unauthorized Actor
The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it
- 7.2 High severity
Database Backup and Table Integrity Check with…: Exposure of Sensitive Information to an Unauthorized Actor
The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35 via the /dashboard/backup.php file. This makes it possible for authenticated atta
- 7.5 High severity
Fluent Support – Helpdesk & Customer Support…: Exposure of Sensitive Information to an Unauthorized Actor
The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attac
- 7.5 High severity
Order Attachments for WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor
The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data s
- 7.5 High severity
Post Grid: Exposure of Sensitive Information to an Unauthorized Actor
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the /wp-json/post-grid/v2/get_users REST API This makes it possible for unauthenticated attack
- 7.5 High severity
Best Employee Management System: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initia
- 7.5 High severity
Qibocms X1: Exposure of Sensitive Information to an Unauthorized Actor
An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.
- 8.3 High severity
Kernel: Exposure of Sensitive Information to an Unauthorized Actor
Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious
- 7.5 High severity
File Uploads Addon for WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor
The File Uploads Addon for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data
- 7.5 High severity
Return Refund and Exchange For WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' dire
- 7.5 High severity
JS Help Desk – AI-Powered Support & Ticketing…: Exposure of Sensitive Information to an Unauthorized Actor
The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated atta
- 7.5 High severity
Majestic Support – The Leading-Edge Help Desk…: Exposure of Sensitive Information to an Unauthorized Actor
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' directory. This makes it possible for una
- 7.5 High severity
Octopus Server: Exposure of Sensitive Information to an Unauthorized Actor
In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in further attacks against the server.
- 7.5 High severity
rengine: Exposure of Sensitive Information to an Unauthorized Actor
reNgine is an automated reconnaissance framework for web applications. A vulnerability was discovered in reNgine, where **an insider attacker with any role** (such as Auditor, Penetration Tester, or Sys Admin) **can extract sensitive information from other reN
- 9.3 Critical severity
pmd: Exposure of Sensitive Information to an Unauthorized Actor
PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not known to have been compromised itself, but given its passphr
- 7.7 High severity
dojo: UNIX Symbolic Link (Symlink) Following
pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Incorrect symlink checks on user specified dojos allows for users (admin not required) to perform an LFI from the CTFd container. When a user
- 7.0 High severity
DataEdgePlatform DataMosaix™ Private Cloud: Exposure of Sensitive Information to an Unauthorized Actor
A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A thr
- 7.7 High severity
macOS: Exposure of Sensitive Information to an Unauthorized Actor
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences.
- 9.8 Critical severity
macOS: Exposure of Sensitive Information to an Unauthorized Actor
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Deleting a conversation in Messages may expose user contact information in system logging.
- 9.8 Critical severity
iPadOS: Exposure of Sensitive Information to an Unauthorized Actor
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location.
- 7.5 High severity
Membership Plugin – Restrict Content: Exposure of Sensitive Information to an Unauthorized Actor
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.13 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract se
- 7.5 High severity
Import WP – Export and Import CSV and XML…: Exposure of Sensitive Information to an Unauthorized Actor
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads directory. This makes it possible for unauthenticated attackers t
- 10.0 Critical severity
coolify: Exposure of Sensitive Information to an Unauthorized Actor
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.374, the missing authorization allows an authenticated user to retrieve any existing private keys on a coolify instance in plain tex
- 9.0 Critical severity
Fleet Server: Exposure of Sensitive Information to an Unauthorized Actor
An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.
- 7.5 High severity
Android: Exposure of Sensitive Information to an Unauthorized Actor
In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additi
- 8.6 High severity
Modicon M340 processors (part numbers BMXP34*): Exposure of Sensitive Information to an Unauthorized Actor
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted function
- 7.5 High severity
PMB platform: Unrestricted Upload of File with Dangerous Type
Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response.
- 7.5 High severity
DIR-878: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the a
- 7.4 High severity
git-credential-manager: Exposure of Sensitive Information to an Unauthorized Actor
Git Credential Manager (GCM) is a secure Git credential helper built on .NET that runs on Windows, macOS, and Linux. The Git credential protocol is text-based over standard input/output, and consists of a series of lines of key-value pairs in the format `key=v
- 7.5 High severity
W3 Total Cache: Exposure of Sensitive Information to an Unauthorized Actor
The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive informatio
- 8.2 High severity
DDS: Exposure of Sensitive Information to an Unauthorized Actor
An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s