Falhas do tipo CWE-538

87 resultados

Exposição de informações sensíveis em arquivos ou diretórios acessíveis externamente

A aplicação escreve dados sensíveis (senhas, tokens, chaves API, PII) em arquivos ou diretórios que podem ser acessados por usuários não autorizados ou pela internet. Isso acontece por falta de controle de permissões adequado ou armazenamento em local público, expondo credenciais e dados críticos.

Exemplo

Um aplicativo salva chaves de acesso ao banco de dados em um arquivo .config dentro da raiz web, ou gera logs de debug contendo tokens de autenticação em /tmp acessível globalmente. Um atacante consegue ler esses arquivos e comprometer a aplicação ou dados do usuário.

Como mitigar

Armazene dados sensíveis fora do escopo web (diretório não servido), use variáveis de ambiente ou sistemas de gestão de secrets (Vault, AWS Secrets Manager), aplique permissões restritivas (chmod 600) e evite logar ou cachear credenciais em texto plano.

CVE-2024-51977MEDIUMUnauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 78.0%CVE-2019-6851—A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (alEPSS 29.9%CVE-2017-9947MEDIUMA vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory travEPSS 7.3%CVE-2017-16770—File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station beEPSS 1.9%CVE-2019-7618—A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into CodEPSS 1.5%CVE-2014-0772—Advantech WebAccess File and Directory Information ExposureEPSS 1.4%CVE-2014-0771—Advantech WebAccess File and Directory Information ExposureEPSS 1.4%CVE-2019-12623MEDIUMCisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration VulnerabilityEPSS 1.2%CVE-2021-32822MEDIUMFile disclosure in hbsEPSS 1.2%CVE-2025-27017MEDIUMApache NiFi: Potential Insertion of MongoDB Password in Provenance RecordEPSS 1.2%CVE-2021-1406MEDIUMCisco Unified Communications Manager Information Disclosure VulnerabilityEPSS 1.1%CVE-2024-21501MEDIUMVersions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attriEPSS 1.0%CVE-2021-21250HIGHPost-Auth External Entity Expansion (XXE)EPSS 0.9%CVE-2025-11079MEDIUMCampcodes Farm Management System file information disclosureEPSS 0.8%CVE-2025-57734MEDIUMIn JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script filesEPSS 0.8%CVE-2024-0191MEDIUMRRJ Nueva Ecija Engineer Online Portal file information disclosureEPSS 0.8%CVE-2023-28444CRITICALangular-server-side-configuration information disclosure vulnerability in monorepo with node.js backendEPSS 0.8%CVE-2016-20024CRITICALZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Privilege EscalationEPSS 0.7%CVE-2023-7062HIGHAdvanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory TraversalEPSS 0.7%CVE-2023-4595HIGHInsertion of Sensitive Information into Externally-Accessible File or Directory in BVRP Software SLmailEPSS 0.7%