Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2017-06-13 CVE-2017-1099 Information Exposure vulnerability in IBM products
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions.
network
low complexity
ibm CWE-200
4.3
2017-06-13 CVE-2016-3696 Information Exposure vulnerability in multiple products
The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
local
low complexity
fedoraproject pulpproject CWE-200
5.5
2017-06-13 CVE-2017-6697 Information Exposure vulnerability in Cisco Elastic Services Controller 2.2(9.76)
A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive system credentials that are stored in an affected system.
network
low complexity
cisco CWE-200
6.5
2017-06-13 CVE-2017-6696 Information Exposure vulnerability in Cisco Elastic Services Controller 2.3(2)
A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sensitive user credentials that are stored in an affected system.
local
low complexity
cisco CWE-200
5.5
2017-06-13 CVE-2017-6695 Information Exposure vulnerability in Cisco Ultra Services Platform 21.0.V0.65839
A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information.
local
low complexity
cisco CWE-200
5.5
2017-06-13 CVE-2017-6691 Information Exposure vulnerability in Cisco Elastic Services Controller 2.3(2)
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive information on an affected system.
network
low complexity
cisco CWE-200
6.5
2017-06-13 CVE-2017-6681 Information Exposure vulnerability in Cisco Ultra Services Framework 21.0.0
A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system.
network
low complexity
cisco CWE-200
7.5
2017-06-13 CVE-2017-6673 Information Exposure vulnerability in Cisco Secure Firewall Management Center 6.1.0.2/6.2.0
A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information.
network
low complexity
cisco CWE-200
6.5
2017-06-13 CVE-2017-4966 Information Exposure vulnerability in multiple products
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15.
local
low complexity
pivotal-software vmware debian CWE-200
7.8
2017-06-12 CVE-2017-1214 Information Exposure vulnerability in IBM Inotes
IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure.
network
low complexity
ibm CWE-200
5.7