Falhas do tipo CWE-294

240 resultados

Exposição de informações sensíveis a atores não autorizados

Fraqueza na qual dados sensíveis (credenciais, chaves, PII, tokens) são acessíveis por usuários ou processos que não deveriam ter acesso. Ocorre por falhas em controle de acesso, armazenamento inadequado ou transmissão desprotegida, permitindo vazamento ou roubo dessas informações.

Exemplo

Uma aplicação grava tokens de autenticação em logs em texto plano acessíveis via endpoint público, ou armazena senhas sem hash em banco de dados com permissões leitura aberta. Um atacante consegue ler essas credenciais e impersonar usuários legítimos.

Como mitigar

Implemente controle de acesso rigoroso baseado em papéis (RBAC/ABAC), criptografe dados sensíveis em repouso e em trânsito (TLS, AES), nunca registre credenciais em logs, e revise regularmente permissões de arquivos e endpoints para garantir que apenas atores autorizados acessem informações críticas.

CVE-2026-30080HIGHOpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported integrity NIA1 and NIA2EPSS 0.3%CVE-2025-48012MEDIUMOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063EPSS 0.3%CVE-2026-102894CRITICALGPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeoverEPSS 0.3%CVE-2026-89209HIGHA vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All vEPSS 0.3%CVE-2024-38823LOWCVE-2024-38823 Salt AdvisoryEPSS 0.3%CVE-2024-12137HIGHAuthentication Bypass in Elfatek Elektronics' ANKA JPD-00028EPSS 0.3%CVE-2026-65824HIGHOpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookieEPSS 0.3%CVE-2023-33854MEDIUMMultiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.EPSS 0.3%CVE-2023-20123MEDIUMCisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay VulnerabilityEPSS 0.2%CVE-2022-51016MEDIUMPocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login ReplayEPSS 0.2%CVE-2026-77967HIGHBotslab G980H Dashcams Authentication Bypass by Capture-replayEPSS 0.2%CVE-2026-18967MEDIUMKeycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flowEPSS 0.2%CVE-2025-13777HIGHAuthentication Bypass due to Improper Session ValidationEPSS 0.2%CVE-2026-41020HIGHEaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authenticationEPSS 0.2%CVE-2023-50128MEDIUMThe remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which EPSS 0.2%CVE-2026-116825HIGHYesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub InboxEPSS 0.2%CVE-2026-46538MEDIUMMicrosoft UFO accepts cross-device TASK_END messages by session_id only, allowing peer task-result injectionEPSS 0.2%CVE-2026-41000LOWWSS4J validation does not use configured replay cacheEPSS 0.2%CVE-2026-42602HIGHazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replayEPSS 0.2%CVE-2026-50575HIGHBetterDesk has a replay behavior vulnerability when devices are deletedEPSS 0.2%