Falhas do tipo CWE-294

240 resultados

Exposição de informações sensíveis a atores não autorizados

Fraqueza na qual dados sensíveis (credenciais, chaves, PII, tokens) são acessíveis por usuários ou processos que não deveriam ter acesso. Ocorre por falhas em controle de acesso, armazenamento inadequado ou transmissão desprotegida, permitindo vazamento ou roubo dessas informações.

Exemplo

Uma aplicação grava tokens de autenticação em logs em texto plano acessíveis via endpoint público, ou armazena senhas sem hash em banco de dados com permissões leitura aberta. Um atacante consegue ler essas credenciais e impersonar usuários legítimos.

Como mitigar

Implemente controle de acesso rigoroso baseado em papéis (RBAC/ABAC), criptografe dados sensíveis em repouso e em trânsito (TLS, AES), nunca registre credenciais em logs, e revise regularmente permissões de arquivos e endpoints para garantir que apenas atores autorizados acessem informações críticas.

CVE-2026-103314HIGHStackrox: stackrox: saml response replay allows multiple central authentication tokensEPSS 0.4%CVE-2026-105485MEDIUMAuthentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a uEPSS 0.4%CVE-2026-73636HIGHApache HTTP Server: mod_auth_digest one-time-nonce replay attackEPSS 0.4%CVE-2025-65552CRITICALD3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication channel. The system doesEPSS 0.4%CVE-2026-90997HIGHKeycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatchEPSS 0.4%CVE-2026-69206MEDIUMHttp4s: DigestAuth allows replay of captured requestsEPSS 0.4%CVE-2020-35473MEDIUMAn information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.EPSS 0.4%CVE-2026-94112HIGHmayswind ezBookkeeping before 2.0.0 TOTP Replay AttackEPSS 0.4%CVE-2025-67135CRITICALWeak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay EPSS 0.4%CVE-2026-76214CRITICALphpMyFAQ before 4.1.7 WebAuthn Replay Attack via ChallengeEPSS 0.4%CVE-2026-103655CRITICALMISP TOTP Code Replay Allows Duplicate Authentication Within Validity PeriodEPSS 0.4%CVE-2026-41707HIGHSpring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof ReplayEPSS 0.4%CVE-2026-44946CRITICALSAML Authentication Replay in RancherEPSS 0.4%CVE-2026-72780HIGHCraft CMS before 5.10.5 WebAuthn Assertion Replay via login-with-passkeyEPSS 0.4%CVE-2022-48507—Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect servicEPSS 0.4%CVE-2023-36857MEDIUMBaker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replayEPSS 0.4%CVE-2025-35061HIGHNewforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmxEPSS 0.4%CVE-2025-35058HIGHNewforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashxEPSS 0.4%CVE-2026-34209HIGHmppx: Tempo has a session close voucher bypass vulnerability due to settled amount equalityEPSS 0.4%CVE-2026-82379HIGHApache Roller: WSSE digest authentication headers can be replayedEPSS 0.4%