CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
Description
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-170 · CAPEC-694
CVEs mapped to this weakness (378)
page 18 of 19| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-11035 | Low | 0.16 | 2.5 | 0.00 | Mar 5, 2025 | Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive information may b exposed due to a vulnerability in software. | ||
| CVE-2025-59447 | Low | 0.14 | 2.2 | 0.00 | Oct 6, 2025 | The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials. | ||
| CVE-2025-2236 | Low | 0.14 | — | 0.00 | May 27, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue… | ||
| CVE-2025-46718 | Low | 0.14 | 3.3 | 0.00 | May 12, 2025 | sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows users with limited sudo… | ||
| CVE-2025-46717 | Low | 0.14 | 3.3 | 0.00 | May 12, 2025 | sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list `. Users with local access… | ||
| CVE-2025-34442 | Hig | 0.03 | 7.5 | 0.01 | Dec 17, 2025 | AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains. | ||
| CVE-2026-58246 | Med | 0.00 | 4.3 | 0.00 | Jul 28, 2026 | SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow… | ||
| CVE-2026-66438 | Med | 0.00 | 5.3 | 0.00 | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. | ||
| CVE-2026-65564 | Med | 0.00 | 5.3 | 0.00 | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. | ||
| CVE-2026-59548 | Hig | 0.00 | 7.5 | 0.00 | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. | ||
| CVE-2026-59528 | Hig | 0.00 | 7.5 | 0.00 | Jul 27, 2026 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. | ||
| CVE-2025-59178 | Med | 0.00 | — | 0.00 | Jul 27, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system. | ||
| CVE-2026-65535 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions. | ||
| CVE-2026-65521 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions. | ||
| CVE-2026-65505 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. | ||
| CVE-2026-65490 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions. | ||
| CVE-2026-65474 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions. | ||
| CVE-2026-61945 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6. | ||
| CVE-2023-37507 | Hig | 0.00 | 7.5 | 0.00 | Jul 21, 2026 | HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed. | ||
| CVE-2026-10588 | Med | 0.00 | 4.4 | 0.00 | Jul 16, 2026 | A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. |
- risk 0.16cvss 2.5epss 0.00
Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive information may b exposed due to a vulnerability in software.
- risk 0.14cvss 2.2epss 0.00
The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials.
- risk 0.14cvss —epss 0.00
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue…
- risk 0.14cvss 3.3epss 0.00
sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows users with limited sudo…
- risk 0.14cvss 3.3epss 0.00
sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list `. Users with local access…
- risk 0.03cvss 7.5epss 0.01
AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains.
- risk 0.00cvss 4.3epss 0.00
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow…
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions.
- risk 0.00cvss 7.5epss 0.00
Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions.
- risk 0.00cvss —epss 0.00
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.
- risk 0.00cvss 4.3epss 0.00
Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
- risk 0.00cvss 6.5epss 0.00
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6.
- risk 0.00cvss 7.5epss 0.00
HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.
- risk 0.00cvss 4.4epss 0.00
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.