Exposure of Resource to Wrong Sphere
CWE-668
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Resources such as files and directories may be inadvertently exposed through mechanisms such as insecure permissions, or when a program accidentally operates on the wrong object. For example, a program may intend that private files can only be provided to a specific user. This effectively defines a control sphere that is intended to prevent attackers from accessing these private files. If the file permissions are insecure, then parties other than the user will be able to access those files. A separate control sphere might effectively require that the user can only access the private files, but not any other files on the system. If the program does not ensure that the user is only requesting private files, then the user might be able to access other files on the system. In either case, the end result is that a resource has been exposed to the wrong party.
We track 173 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.2.
Latest Exposure of Resource to Wrong Sphere vulnerabilities
- 8.6 High severity
Piano-LED-Visualizer: Exposure of Resource to Wrong Sphere
Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. Version 1.3 and prior are vulnerable to a path traversal attack. The `os.path.join` call is unsafe for use with untrusted input. When the `os
- 7.8 High severity
PowerScale OneFS: Exposure of Resource to Wrong Sphere
Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentiall
- 8.1 High severity
CODESYS Control RTE (SL): Exposure of Resource to Wrong Sphere
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
- 8.8 High severity
Rancher: Exposure of Resource to Wrong Sphere
A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.
- 7.8 High severity
Spring Boot: Exposure of Resource to Wrong Sphere
spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only
- 7.5 High severity
thinkphp: Exposure of Resource to Wrong Sphere
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an inten
- 9.8 Critical severity
NAVER Whale browser: Exposure of Resource to Wrong Sphere
Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises.
- 7.3 High severity
McAfee WebAdvisor: Exposure of Resource to Wrong Sphere
Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behavi
- 7.8 High severity
Kcron: Concurrent Execution using Shared Resource with Improper Synchronization
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run una
- 8.1 High severity
Visual Voice Mail: Exposure of Resource to Wrong Sphere
The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the READ_SMS permission, and reads an IMAP credentialing message that is (by design) not displayed to th
- 9.8 Critical severity
Seatd: Exposure of Resource to Wrong Sphere
seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socket pathname.
- 7.5 High severity
Git: Exposure of Resource to Wrong Sphere
The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror opt
- 8.8 High severity
Jenkins Debian Package Builder Plugin: Exposure of Resource to Wrong Sphere
Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS command