78 matches found
CVE-2023-4910
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache...
Input validation
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache...
The vulnerability of the 3Scale Admin Portal’s API interface management software lies in its ability to disclose information through browser caching, allowing an attacker to expose protected information.
The vulnerability of the 3Scale Admin Portal’s API interfaces relates to the disclosure of information through browser caching. Exploiting this vulnerability could allow an attacker to disclose protected information...
Security Bulletin: IBM Engineering Lifecycle Management is vulnerable to some browser which may store a local cached copy of content received from web servers.(CVE-2021-20551)
Summary Summary guidance: Unless directed otherwise, browsers may store a local cached copy of content received from web servers. Some browsers, including Internet Explorer, cache content accessed via HTTPS. If sensitive information in application responses is stored in the local cache, then this...
Siemens Mendix Information Disclosure Vulnerability
A security vulnerability exists in Siemens Mendix, a low-code application development platform from Siemens, Germany. The vulnerability stems from the fact that applications built with the affected version of Mendix Studio Pro do not prevent the caching of file documents when opening or downloadi...
CVE-2019-19000
ABB eSOMS versions 4.0–6.0.3 are affected by CVE-2019-19000 due to improper configuration of Cache-Control and Pragma HTTP headers in application responses, which can allow browsers/proxies to cache sensitive information. The issue is documented in multiple sources (NVD entry for CVE-2019-19000 a...
CVE-2020-10096
An issue was discovered in Zammad 3.0 through 3.2. It does not prevent caching of confidential data within browser memory. An attacker who either remotely compromises or obtains physical access to a user's workstation can browse the browser cache contents and obtain sensitive information. The...
Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling File Gateway (CVE-2018-1470, CVE-2017-1544, CVE-2017-1575)
Summary Information disclosure security vulnerability affects IBM Sterling Filegateway. Vulnerability Details CVEID: CVE-2018-1470 DESCRIPTION: IBM Sterling File Gateway could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further...
CVE-2019-16177
In Limesurvey before 3.17.14, the entire database is exposed through browser caching...
CVE-2019-16177
In Limesurvey before 3.17.14, the entire database is exposed through browser caching...
Design/Logic Flaw
In Limesurvey before 3.17.14, the entire database is exposed through browser caching...
CVE-2019-16177
In Limesurvey before 3.17.14, the entire database is exposed through browser caching...
CVE-2019-16177
LimeSurvey prior to 3.17.14 exposes the entire database via browser cache. Affected: LimeSurvey before 3.17.14. Root cause: database content is cached and retrievable from the browser. Impact: potential access to complete data set per the cited advisories. Remediation: upgrade to LimeSurvey 3.17....
CVE-2019-16177: Exposure of Sensitive Information to an Unauthorized Actor
In Limesurvey before 3.17.14, the entire database is exposed through browser caching...
CVE-2018-18640
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...
UBUNTU-CVE-2018-18640
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...
CVE-2018-18640
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...
Design/Logic Flaw
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...