Fallos del tipo CWE-203

350 resultados

Discrepância Observável em Respostas

A aplicação revela informações sensíveis através de diferenças detectáveis em seu comportamento, tempo de resposta ou mensagens de erro — por exemplo, retornando erros diferentes para usuário inexistente vs. senha incorreta. Um atacante pode explorar essas pistas para inferir dados confidenciais sem acesso direto.

Ejemplo

Um sistema de login que responde 'Usuário não encontrado' em 100ms, mas 'Senha incorreta' em 500ms (após validação). Um invasor enumera contas válidas medindo latência, ou identifica emails registrados pela velocidade da resposta.

Cómo mitigar

Padronize respostas de erro (mesma mensagem genérica), normalize tempos de execução com delays constantes, e evite vazar informações estruturais (ex: 'este email já existe'). Auditoria de logs e timestamps também revelar quem tentou enumerar dados sensíveis.

CVE-2024-9513MEDIUMNetadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposureEPSS 1.7%CVE-2016-9129—Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address EPSS 1.7%CVE-2024-39891MEDIUMIn the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access toEPSS 1.7%KEVCVE-2021-24651—Poll Maker < 3.4.2 - Unauthenticated Time Based SQL InjectionEPSS 1.6%CVE-2024-0553HIGHGnutls: incomplete fix for cve-2023-5981EPSS 1.6%CVE-2020-5143—SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based oEPSS 1.6%CVE-2020-36421MEDIUMAn issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secEPSS 1.6%CVE-2018-14597—CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling EPSS 1.5%CVE-2018-16869MEDIUMA Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1EPSS 1.5%CVE-2023-0361HIGHA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recEPSS 1.4%CVE-2024-5124HIGHTiming Attack Vulnerability in gaizhenbiao/chuanhuchatgptEPSS 1.4%CVE-2022-22120MEDIUMNocoDB - Observable Discrepancy in the password-reset featureEPSS 1.4%CVE-2022-36105MEDIUMUser Enumeration via Response Timing in TYPO3EPSS 1.3%CVE-2020-3585MEDIUMCisco Firepower 1000 Series Bleichenbacher Attack VulnerabilityEPSS 1.3%CVE-2021-1486MEDIUMCisco SD-WAN vManage HTTP Authentication User Enumeration VulnerabilityEPSS 1.2%CVE-2023-33850HIGHIBM GSKit-Crypto information disclosureEPSS 1.2%CVE-2021-29443MEDIUMPadding Oracle Attack due to Observable Timing Discrepancy in joseEPSS 1.2%CVE-2024-2408MEDIUMPHP is vulnerable to the Marvin AttackEPSS 1.2%CVE-2023-5992MEDIUMOpensc: side-channel leaks while stripping encryption pkcs#1 paddingEPSS 1.2%CVE-2023-50781HIGHM2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657EPSS 1.1%