Vulnerabilities > Information Exposure Through an Error Message

DATE CVE VULNERABILITY TITLE RISK
2020-07-28 CVE-2020-4319 Information Exposure Through an Error Message vulnerability in IBM MQ Appliance
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic.
network
low complexity
ibm CWE-209
4.3
2020-07-23 CVE-2019-11252 Information Exposure Through an Error Message vulnerability in Kubernetes
The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.
network
low complexity
kubernetes CWE-209
6.5
2020-07-22 CVE-2020-6511 Information Exposure Through an Error Message vulnerability in multiple products
Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google debian opensuse fedoraproject CWE-209
6.5
2020-07-01 CVE-2020-15478 Information Exposure Through an Error Message vulnerability in Journal-Theme Journal
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.
network
low complexity
journal-theme CWE-209
7.5
2020-06-24 CVE-2020-4341 Information Exposure Through an Error Message vulnerability in IBM Security Secret Server 10.6/10.7/10.7.000059
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
5.3
2020-06-24 CVE-2020-4327 Information Exposure Through an Error Message vulnerability in IBM Security Secret Server 10.6/10.7/10.7.000059
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
5.3
2020-06-17 CVE-2020-4532 Information Exposure Through an Error Message vulnerability in IBM products
IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
5.3
2020-06-03 CVE-2020-6503 Information Exposure Through an Error Message vulnerability in Google Chrome
Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
network
low complexity
google CWE-209
6.5
2020-05-28 CVE-2020-4248 Information Exposure Through an Error Message vulnerability in IBM Security Identity Governance and Intelligence 5.2.6
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
2.7
2020-05-27 CVE-2020-4357 Information Exposure Through an Error Message vulnerability in IBM Spectrum Scale
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
4.3