CVE-2024-12380: Generation of Error Message Containing Sensitive Information

An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication...

CVE-2024-36070: Exposure of Sensitive System Information to an Unauthorized Control Sphere

tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php. An update is also available for the 2022.11 series...

CVE-2017-1000485

Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authentication information via standard filesystem operations...

CVE-2017-1000485: Incorrect Permission Assignment for Critical Resource

Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authentication information via standard filesystem operations...

PT-2017-7877

Name of the Vulnerable Software and Affected Versions Telegram Desktop version 0.10.19 Description The issue allows local users to obtain sensitive authentication information via standard filesystem operations due to the use of 0755 permissions for the $HOME/.TelegramDesktop directory...

CVE-2014-1487

The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages...

PT-2012-2104

Name of the Vulnerable Software and Affected Versions Blue Coat ProxySG versions 6.1 before 6.1.5.1 Blue Coat ProxySG versions 6.2 before 6.2.2.1 Description The issue allows context-dependent attackers to obtain sensitive authentication information by leveraging read access to a downloaded core...