CWEweakness

CWE-213 Exposure of Sensitive Information Due to Incompatible Policies

Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product's intended functionality exposes information to certain actors in accordance with the developer's security policy, but this information is regarded as sensitive according to the intended security policies of other stakeholders such as the product's administrator, users, or others whose information is being processed.

Common consequences

• Confidentiality: Read Application Data

Potential mitigations

• [Requirements, Architecture and Design] When handling information, the developer must consider whether the information is regarded as sensitive by different stakeholders, such as users or administrators. Each stakeholder effectively has its own intended security policy that the product is expected to uphold. When a developer does not treat that information as sensitive, this can introduce a vulnerability that violates the expectations of the product's users.

Observed examples

• CVE-2002-1725: Script calls phpinfo() • CVE-2004-0033: Script calls phpinfo() • CVE-2003-1181: Script calls phpinfo() • CVE-2004-1422: Script calls phpinfo() • CVE-2004-1590: Script calls phpinfo() • CVE-2003-1038: Product lists DLLs and full pathnames. • CVE-2005-1205: Telnet protocol allows servers to obtain sensitive environment information from clients. • CVE-2005-0488: Telnet protocol allows servers to obtain sensitive environment information from clients.

Related

Observed example · CVE (8)

  • CVE-2005-0488 Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive… vulnerability
  • CVE-2005-1205 The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive… vulnerability
  • CVE-2004-1422 WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings. vulnerability
  • CVE-2004-1590 Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function. vulnerability
  • CVE-2003-1038 The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command… vulnerability
  • CVE-2004-0033 admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command. vulnerability
  • CVE-2003-1181 Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo()… vulnerability
  • CVE-2002-1725 phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the… vulnerability

Child of · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

Referenced by CVE · weakness (35)

  • CVE-2026-0893 AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by… vulnerability
  • CVE-2026-107761 Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. vulnerability
  • CVE-2026-55425 Graylog is a free and open log management platform. vulnerability
  • CVE-2026-56538 An endpoint in HCL Connections is vulnerable to information disclosure. vulnerability
  • CVE-2026-6280 Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. vulnerability
  • CVE-2026-33216 NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. vulnerability
  • CVE-2025-52603 HCL Connections is vulnerable to information disclosure. vulnerability
  • CVE-2025-54831 Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. vulnerability
  • CVE-2024-49827 IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information… vulnerability
  • CVE-2025-4976 An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that,… vulnerability
  • CVE-2025-32791 The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules. vulnerability
  • CVE-2025-24316 The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to… vulnerability
  • CVE-2024-49354 IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls. vulnerability
  • CVE-2023-5117 An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on… vulnerability
  • CVE-2023-3441 An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. vulnerability
  • CVE-2024-44121 Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would… vulnerability
  • CVE-2024-7267 Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows… vulnerability
  • CVE-2023-6517 Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. vulnerability
  • CVE-2023-40570 Datasette is an open source multi-tool for exploring and publishing data. vulnerability
  • CVE-2023-36919 In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy… vulnerability
  • CVE-2023-27465 A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1),… vulnerability
  • CVE-2022-30350 Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. vulnerability
  • CVE-2022-39848 Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log. vulnerability
  • CVE-2022-33692 Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid… vulnerability
  • CVE-2022-33694 Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via… vulnerability
  • CVE-2022-33696 Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via… vulnerability
  • CVE-2022-28794 Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card… vulnerability
  • CVE-2022-30714 Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. vulnerability
  • CVE-2022-30728 Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. vulnerability
  • CVE-2022-22541 SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see… vulnerability
Show all 35 ›

Referenced by CWE · has member (1)

  • CWE-1340 CISQ Data Protection Measures view

Referenced by OWASP · mapped cwe (2)

  • API3:2023 Broken Object Property Level Authorization API Security Top 10 2023
  • A04:2021 Insecure Design Top 10 2021