Weaknesses of type CWE-203

308 results

Discrepância observável em resposta de erro

A aplicação expõe informações diferentes em suas respostas de erro dependendo de condições internas (ex: usuário existe ou não, senha correta ou não, arquivo encontrado ou não), permitindo que um atacante deduza informações sensíveis através de análise de timing, mensagens ou códigos de status. O risco está em vazar informações que não deveriam ser públicas.

Example

Um endpoint de login retorna 'Usuário não encontrado' quando o email não existe, mas 'Senha incorreta' quando o email existe mas a senha está errada. Um atacante usa essas mensagens para enumerar emails válidos da plataforma sem precisar saber a senha de ninguém.

How to mitigate

Padronize todas as respostas de erro para o mesmo status HTTP e mensagem genérica (ex: sempre 'Credenciais inválidas'). Use timing constante nas verificações criptográficas e operações sensíveis para evitar ataques por timing side-channel.

CVE-2017-5753MEDIUMSystems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an atEPSS 92.6%CVE-2017-5715MEDIUMSystems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of informationEPSS 74.2%CVE-2018-3639MEDIUMSystems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memEPSS 60.6%CVE-2023-28770HIGHThe sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior toEPSS 57.8%CVE-2017-13099HIGHwolfSSL Bleichenbacher/ROBOTEPSS 24.9%CVE-2017-13098HIGHBouncyCastle JCE TLS Bleichenbacher/ROBOTEPSS 24.3%CVE-2022-20866HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak VulnerabilityEPSS 17.2%CVE-2022-4304MEDIUMTiming Oracle in RSA DecryptionEPSS 16.2%CVE-2022-24436MEDIUMObservable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable infoEPSS 11.8%CVE-2018-3615HIGHSystems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosuEPSS 6.3%CVE-2021-38153—Timing Attack Vulnerability for Apache Kafka Connect and ClientsEPSS 6.3%CVE-2018-3620MEDIUMSystems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residEPSS 5.6%CVE-2016-20012MEDIUMOpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH sEPSS 5.3%CVE-2020-1968LOWRaccoon attackEPSS 4.8%CVE-2022-34125MEDIUMfront/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive information via a _log/ pathnEPSS 4.6%CVE-2021-29621MEDIUMObservable Response Discrepancy in Flask-AppBuilderEPSS 3.4%CVE-2023-3897MEDIUMBypassing CAPTCHA & Enumerating Usernames via Password Reset PageEPSS 3.1%CVE-2018-10919MEDIUMThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authentEPSS 2.2%CVE-2020-14145MEDIUMThe client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This aEPSS 2.1%CVE-2024-54767HIGHAn access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information wEPSS 1.8%