CWE-612 · 10 records

Improper Authorization of Index Containing Sensitive Information

CVEs in this class

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-25635No exploit	IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERSalf · alf · CWE-612 Broken access control (IDOR)	High8.8	—	0.7%	Feb 19, 2024
34Monitor	CVE-2019-25605No exploit	EquityPandit 1.0 Insecure Logging Information Disclosureplay · equitypandit · CWE-612 Pre-auth	High8.7	—	0.2%	Mar 22, 2026
30Monitor	CVE-2022-35980No exploit	OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Informationamazon · opensearch · CWE-612 Pre-auth	High7.5	—	1.1%	Aug 12, 2022
27Monitor	CVE-2025-3654No exploit	Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpointpetlibro · petlibro · CWE-612 Pre-auth	Medium6.9	—	0.2%	Jan 4, 2026
27Monitor	CVE-2025-3653No exploit	Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpointpetlibro · petlibro · CWE-612 Pre-auth	Medium6.9	—	0.2%	Jan 4, 2026
27Monitor	CVE-2025-3660No exploit	Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpointpetlibro · petlibro · CWE-612 Pre-auth Broken access control (IDOR)	Medium6.9	—	0.2%	Jan 4, 2026
26Monitor	CVE-2024-49071No exploit	Windows Defender Information Disclosure Vulnerabilitymicrosoft · defender for endpoint · CWE-612	Medium6.5	—	1.0%	Dec 12, 2024
26Monitor	CVE-2023-4560No exploit	Improper Authorization of Index Containing Sensitive Information in omeka/omeka-someka · omeka s · CWE-612	Medium6.5	—	0.7%	Aug 27, 2023
25Monitor	CVE-2022-41918No exploit	Issue with fine-grained access control of indices backing data streamsamazon · opensearch · CWE-612	Medium6.3	—	0.4%	Nov 15, 2022
15Monitor	CVE-2022-22565No exploit	Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information.dell · emc powerscale onefs · CWE-612	Low3.8	—	0.4%	Apr 12, 2022

CVE-2024-25635
35Monitor
IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
alf · alfFeb 19, 2024
CVE-2019-25605
34Monitor
EquityPandit 1.0 Insecure Logging Information Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
play · equitypanditMar 22, 2026
CVE-2022-35980
30Monitor
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
amazon · opensearchAug 12, 2022
CVE-2025-3654
27Monitor
Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpoint
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
petlibro · petlibroJan 4, 2026
CVE-2025-3653
27Monitor
Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
petlibro · petlibroJan 4, 2026
CVE-2025-3660
27Monitor
Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpoint
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
petlibro · petlibroJan 4, 2026
CVE-2024-49071
26Monitor
Windows Defender Information Disclosure Vulnerability
MediumCVSS 6.5No exploitEPSS 1%
microsoft · defender for endpointDec 12, 2024
CVE-2023-4560
26Monitor
Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s
MediumCVSS 6.5No exploitEPSS 0%
omeka · omeka sAug 27, 2023
CVE-2022-41918
25Monitor
Issue with fine-grained access control of indices backing data streams
MediumCVSS 6.3No exploitEPSS 0%
amazon · opensearchNov 15, 2022
CVE-2022-22565
15Monitor
Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information.
LowCVSS 3.8No exploitEPSS 0%
dell · emc powerscale onefsApr 12, 2022

All vulnerability classes