Invocation of Process Using Visible Sensitive Information
CWE-214
A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.
We track 6 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.5.
Latest Invocation of Process Using Visible Sensitive Information vulnerabilities
- 7.6 High severity
pgAdmin 4: Invocation of Process Using Visible Sensitive Information
To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own process environment: as PGPASSWORD for the PSQL tool, and under a per-process variable for a utility. Nothing remove
- 7.1 High severity
blackduck-c-cpp: Invocation of Process Using Visible Sensitive Information
Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which i
- 7.9 High severity
Pardus Domain Joiner: Invocation of Process Using Visible Sensitive Information
Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation. This issue affects Pardus Domain Joiner: from 0.5.2 before 0.5.4.
- 7.8 High severity
Control-M/Server: Insufficiently Protected Credentials
BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on
- 7.5 High severity
QRadar Suite Software: Invocation of Process Using Visible Sensitive Information
IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 displays sensitive data improperly to a local privileged user, in non default configurations, during back-end commands which may result in the unexp
- 7.1 High severity
gradio-app/gradio: Invocation of Process Using Visible Sensitive Information
The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code