CWE-612 · 10 kayıt

Improper Authorization of Index Containing Sensitive Information

Bu sınıftaki CVE’ler

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2024-25635İstismar yok	IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERSalf · alf · CWE-612 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,7	19 Şub 2024
34İzleyin	CVE-2019-25605İstismar yok	EquityPandit 1.0 Insecure Logging Information Disclosureplay · equitypandit · CWE-612 Kimlik doğrulamasız	Yüksek8,7	—	%0,3	22 Mar 2026
30İzleyin	CVE-2022-35980İstismar yok	OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Informationamazon · opensearch · CWE-612 Kimlik doğrulamasız	Yüksek7,5	—	%1,2	12 Ağu 2022
27İzleyin	CVE-2025-3654İstismar yok	Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpointpetlibro · petlibro · CWE-612 Kimlik doğrulamasız	Orta6,9	—	%0,3	3 Oca 2026
27İzleyin	CVE-2025-3653İstismar yok	Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpointpetlibro · petlibro · CWE-612 Kimlik doğrulamasız	Orta6,9	—	%0,3	3 Oca 2026
27İzleyin	CVE-2025-3660İstismar yok	Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpointpetlibro · petlibro · CWE-612 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,9	—	%0,2	3 Oca 2026
26İzleyin	CVE-2024-49071İstismar yok	Windows Defender Information Disclosure Vulnerabilitymicrosoft · defender for endpoint · CWE-612	Orta6,5	—	%1,1	12 Ara 2024
26İzleyin	CVE-2023-4560İstismar yok	Improper Authorization of Index Containing Sensitive Information in omeka/omeka-someka · omeka s · CWE-612	Orta6,5	—	%0,7	27 Ağu 2023
25İzleyin	CVE-2022-41918İstismar yok	Issue with fine-grained access control of indices backing data streamsamazon · opensearch · CWE-612	Orta6,3	—	%0,5	15 Kas 2022
15İzleyin	CVE-2022-22565İstismar yok	Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information.dell · emc powerscale onefs · CWE-612	Düşük3,8	—	%0,5	12 Nis 2022

CVE-2024-25635
35İzleyin
IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS
YüksekCVSS 8,8İstismar yokEPSS %1
- Erişim denetimi (IDOR)
alf · alf19 Şub 2024
CVE-2019-25605
34İzleyin
EquityPandit 1.0 Insecure Logging Information Disclosure
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
play · equitypandit22 Mar 2026
CVE-2022-35980
30İzleyin
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
amazon · opensearch12 Ağu 2022
CVE-2025-3654
27İzleyin
Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpoint
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
petlibro · petlibro3 Oca 2026
CVE-2025-3653
27İzleyin
Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
petlibro · petlibro3 Oca 2026
CVE-2025-3660
27İzleyin
Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpoint
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
petlibro · petlibro3 Oca 2026
CVE-2024-49071
26İzleyin
Windows Defender Information Disclosure Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1
microsoft · defender for endpoint12 Ara 2024
CVE-2023-4560
26İzleyin
Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s
OrtaCVSS 6,5İstismar yokEPSS %1
omeka · omeka s27 Ağu 2023
CVE-2022-41918
25İzleyin
Issue with fine-grained access control of indices backing data streams
OrtaCVSS 6,3İstismar yokEPSS %0
amazon · opensearch15 Kas 2022
CVE-2022-22565
15İzleyin
Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information.
DüşükCVSS 3,8İstismar yokEPSS %0
dell · emc powerscale onefs12 Nis 2022

Tüm zafiyet sınıfları