Falhas do tipo CWE-203

308 resultados

Discrepância Observável em Comportamento

Ocorre quando o sistema exibe comportamentos ou mensagens diferentes dependendo de informações secretas (senha, token, chave), permitindo que um atacante deduza essas informações através de análise de resposta. O perigo está em vazar conhecimento que deveria ser privado por meio de canais laterais, como tempo de resposta, mensagens de erro ou mudanças visuais.

Exemplo

Um formulário de login que retorna 'Usuário não existe' para usuários inválidos e 'Senha incorreta' para usuários válidos com senha errada. Um atacante usa essas mensagens diferentes para enumerar contas válidas sem nunca adivinhar a senha correta.

Como mitigar

Padronize respostas do sistema: retorne sempre a mesma mensagem genérica (ex: 'Credenciais inválidas') e o mesmo tempo de resposta, independentemente de qual parte falhou. Use técnicas como constant-time comparison para operações sensíveis e evite vazar informações através de timing, códigos HTTP diferenciados ou feedback textual discriminador.

CVE-2017-5753MEDIUMSystems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an atEPSS 92.6%CVE-2017-5715MEDIUMSystems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of informationEPSS 74.2%CVE-2018-3639MEDIUMSystems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memEPSS 60.6%CVE-2023-28770HIGHThe sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior toEPSS 57.8%CVE-2017-13099HIGHwolfSSL Bleichenbacher/ROBOTEPSS 24.9%CVE-2017-13098HIGHBouncyCastle JCE TLS Bleichenbacher/ROBOTEPSS 24.3%CVE-2022-20866HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak VulnerabilityEPSS 17.2%CVE-2022-4304MEDIUMTiming Oracle in RSA DecryptionEPSS 16.2%CVE-2022-24436MEDIUMObservable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable infoEPSS 11.8%CVE-2018-3615HIGHSystems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosuEPSS 6.3%CVE-2021-38153—Timing Attack Vulnerability for Apache Kafka Connect and ClientsEPSS 6.3%CVE-2018-3620MEDIUMSystems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residEPSS 5.6%CVE-2016-20012MEDIUMOpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH sEPSS 5.3%CVE-2020-1968LOWRaccoon attackEPSS 4.8%CVE-2022-34125MEDIUMfront/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive information via a _log/ pathnEPSS 4.6%CVE-2021-29621MEDIUMObservable Response Discrepancy in Flask-AppBuilderEPSS 3.4%CVE-2023-3897MEDIUMBypassing CAPTCHA & Enumerating Usernames via Password Reset PageEPSS 3.1%CVE-2018-10919MEDIUMThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authentEPSS 2.2%CVE-2020-14145MEDIUMThe client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This aEPSS 2.1%CVE-2024-54767HIGHAn access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information wEPSS 1.8%