Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

CVEs (575)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-23973 2Debian Mozilla 4Debian Linux FirefoxFirefox Esr+1 more Jun 17, 2026 Feb 26, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox...Show more When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.Show less
CVE-2021-23968 2Debian Mozilla 4Debian Linux FirefoxFirefox Esr+1 more Jun 17, 2026 Feb 26, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive...Show more If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.Show less
CVE-2020-1717 1Redhat 4Jboss Fuse KeycloakOpenshift Application Runtimes+1 more Jun 17, 2026 Feb 11, 2021 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
CVE-2021-20402 1Ibm 1Security Verify Information Queue Jun 17, 2026 Feb 11, 2021 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in fu...Show more IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196076.Show less
CVE-2020-4628 1Ibm 1Cloud Pak For Security Jun 17, 2026 Jan 27, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in fu...Show more IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369.Show less
CVE-2020-4600 1Ibm 1Security Guardium Insights Jun 17, 2026 Jan 13, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks aga...Show more IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184832.Show less
CVE-2020-4599 1Ibm 1Security Guardium Insights Jun 17, 2026 Jan 13, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks aga...Show more IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184824.Show less
CVE-2020-15219 1Combodo 1Itop Jun 17, 2026 Jan 13, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, when a download error is triggered in the user portal, an SQL query is displayed to the user. This is fixed in versions 2.7...Show more Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, when a download error is triggered in the user portal, an SQL query is displayed to the user. This is fixed in versions 2.7.2 and 3.0.0.Show less
CVE-2020-4544 1Ibm 13Collaborative Lifecycle Management Doors NextEngineering Insights+10 more Jun 17, 2026 Jan 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the...Show more IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.Show less
CVE-2020-4487 1Ibm 13Collaborative Lifecycle Management Doors NextEngineering Insights+10 more Jun 17, 2026 Jan 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the...Show more IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.Show less
CVE-2020-4897 1Ibm 2Emptoris Contract Management Emptoris Spend Analysis Jun 17, 2026 Jan 7, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser...Show more IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190988.Show less
CVE-2020-4761 1Ibm 1Sterling B2b Integrator Jun 17, 2026 Jan 5, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is return...Show more IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 188895.Show less
CVE-2020-2505 1Qnap 1Qes Jun 17, 2026 Dec 24, 2020 N/A· v4 2.3 LOW· v3 2.1 LOW· v2 If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
CVE-2020-4842 1Ibm 1Security Secret Server Jun 17, 2026 Dec 21, 2020 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against...Show more IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190046.Show less
CVE-2020-4846 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Dec 17, 2020 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further...Show more IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190290.Show less
CVE-2020-35177 1Hashicorp 1Vault Jun 17, 2026 Dec 17, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.
CVE-2020-4907 1Ibm 1Financial Transaction Manager For Multiplatform Jun 17, 2026 Dec 16, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informa...Show more IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.Show less
CVE-2020-16128 1Canonical 1Ubuntu Linux Jun 17, 2026 Dec 9, 2020 N/A· v4 3.8 LOW· v3 2.1 LOW· v2 The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0...Show more The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.Show less
CVE-2020-25640 1Redhat 1Wildfly Jun 17, 2026 Nov 24, 2020 N/A· v4 5.3 MEDIUM· v3 3.5 LOW· v2 A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
CVE-2020-16121 2Canonical Packagekit Project 2Packagekit Ubuntu Linux Jun 17, 2026 Nov 7, 2020 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

Previous 1...222324...29 Next