Self-generated Error Message Containing Sensitive Information
CWE-210
The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 8.8.
How this weakness is prevented
- Implementation Build and Compilation: Debugging information should not make its way into a production release.
- Implementation Build and Compilation: Debugging information should not make its way into a production release.
Latest Self-generated Error Message Containing Sensitive Information vulnerabilities
- 8.8 High severity
RX4-1500: Generation of Error Message Containing Sensitive Information
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.