Exposure of Resource to Wrong Sphere
CWE-668
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Resources such as files and directories may be inadvertently exposed through mechanisms such as insecure permissions, or when a program accidentally operates on the wrong object. For example, a program may intend that private files can only be provided to a specific user. This effectively defines a control sphere that is intended to prevent attackers from accessing these private files. If the file permissions are insecure, then parties other than the user will be able to access those files. A separate control sphere might effectively require that the user can only access the private files, but not any other files on the system. If the program does not ensure that the user is only requesting private files, then the user might be able to access other files on the system. In either case, the end result is that a resource has been exposed to the wrong party.
We track 173 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.2.
Latest Exposure of Resource to Wrong Sphere vulnerabilities
- 7.4 High severity
HRX-1620: Exposure of Resource to Wrong Sphere
Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer
- 8.8 High severity
Red Hat Enterprise Linux 8: Exposure of Resource to Wrong Sphere
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmp
- 9.8 Critical severity
FileCatalyst: Exposure of Resource to Wrong Sphere
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web p
- 7.5 High severity
Molongui Authorship – Author Boxes, Guest…: Exposure of Resource to Wrong Sphere
The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'ma_debu' parameter. This makes it possible for unauthenticated attac
- 8.6 High severity
runc: Exposure of Resource to Wrong Sphere
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a workin
- 7.5 High severity
Junos OS: Exposure of Resource to Wrong Sphere
An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric (AF) sce
- 7.8 High severity
Budgie Extras: Exposure of Resource to Wrong Sphere
Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private in
- 7.8 High severity
Budgie Extras: Exposure of Resource to Wrong Sphere
Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create an
- 7.8 High severity
Budgie Extras: Exposure of Resource to Wrong Sphere
Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and
- 7.8 High severity
Budgie Extras: Exposure of Resource to Wrong Sphere
Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-creat
- 7.8 High severity
Budgie Extras: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and con
- 7.8 High severity
Budgie Extras: Exposure of Resource to Wrong Sphere
Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and
- 7.5 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Exposure of Resource to Wrong Sphere
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
- 7.5 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Exposure of Resource to Wrong Sphere
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
- 7.8 High severity
Red Hat Enterprise Linux 7: Exposure of Resource to Wrong Sphere
A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the sy
- 7.8 High severity
Univention Corporate Server: Exposure of Resource to Wrong Sphere
The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform follo
- 7.5 High severity
HarmonyOS: Exposure of Resource to Wrong Sphere
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.
- 7.8 High severity
LG V60 Thin Q 5G(LMV600VM): Exposure of Resource to Wrong Sphere
The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launche
- 7.5 High severity
Onyx: Exposure of Resource to Wrong Sphere
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.
- 7.5 High severity
Cadence: Exposure of Resource to Wrong Sphere
Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversary before Cadence started. The adversary can leverage this to create or overwrite files via a symlink
- 7.5 High severity
Acronis Agent: Exposure of Resource to Wrong Sphere
Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
- 7.5 High severity
HarmonyOS: Exposure of Resource to Wrong Sphere
Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security.
- 8.1 High severity
Zoom SDK's: Exposure of Resource to Wrong Sphere
Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.
- 7.5 High severity
Bioaccess Ivs: Exposure of Resource to Wrong Sphere
ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.
- 7.3 High severity
CODESYS Development System: Exposure of Resource to Wrong Sphere
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by le
- 7.5 High severity
Report Server: Exposure of Resource to Wrong Sphere
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various ta
- 7.8 High severity
Zoom Rooms for Windows: Exposure of Resource to Wrong Sphere
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- 7.5 High severity
Marukyu Line: Exposure of Resource to Wrong Sphere
An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.
- 7.5 High severity
ICR890-4: Exposure of Resource to Wrong Sphere
Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the system.
- 7.5 High severity
ICR890-4: Exposure of Resource to Wrong Sphere
Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via HTTP requests.
- 8.1 High severity
WL-WN531AX2: Exposure of Resource to Wrong Sphere
Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in.
- 7.5 High severity
xwiki-platform: Exposure of Resource to Wrong Sphere
XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a REST endpoint and obtain the obfuscated passwords, even when the mail obfuscation is activated. The issue has bee
- 7.5 High severity
xwiki-platform: Exposure of Resource to Wrong Sphere
XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscation configuration was not fully taken into account. While the mail displayed to the end user was obfuscated, t
- 7.8 High severity
runtime: Exposure of Resource to Wrong Sphere
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setg
- 8.2 High severity
Landscape: Exposure of Resource to Wrong Sphere
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.
- 7.1 High severity
Insight: Exposure of Resource to Wrong Sphere
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. At
- 7.5 High severity
Competition Management System: Exposure of Resource to Wrong Sphere
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users. This issue affects Competition Management System: before 23
- 7.5 High severity
Apache InLong: Exposure of Resource to Wrong Sphere
Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of cluster of InLong. Users are advised to upgrade to Ap
- 7.5 High severity
Apache InLong: Exposure of Resource to Wrong Sphere
Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apac
- 7.8 High severity
Intel DCM software: Exposure of Resource to Wrong Sphere
Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.