CWE-203 · Observable Discrepancy (page 6)
Page 6 of 8 — CVEs classified under CWE-203, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22356 | Medium | 6.5 | 2022-04-05 | IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attemp… |
CVE-2021-39791 | Medium | 5.5 | 2022-03-30 | In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2021-39788 | Medium | 5.5 | 2022-03-30 | In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information dis… |
CVE-2021-39775 | Medium | 5.5 | 2022-03-30 | In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2021-39773 | Medium | 5.5 | 2022-03-30 | In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information… |
CVE-2021-39766 | Medium | 5.5 | 2022-03-30 | In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This coul… |
CVE-2021-39761 | Medium | 5.5 | 2022-03-30 | In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could l… |
CVE-2021-39760 | Medium | 5.5 | 2022-03-30 | In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2021-39756 | Medium | 5.5 | 2022-03-30 | In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This cou… |
CVE-2021-39755 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query permissions due to side channel informatio… |
CVE-2021-39754 | Medium | 5.5 | 2022-03-30 | In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This c… |
CVE-2021-39745 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2021-39744 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-24784 | Low | 3.7 | 2022-03-25 | Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single character of a user's password hash using a spe… |
CVE-2021-44421 | Medium | 5.5 | 2022-03-10 | The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unautho… |
CVE-2020-36517 | High | 7.5 | 2022-03-10 | An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal n… |
CVE-2021-42016 | High | 7.5 | 2022-03-08 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802, RUGGEDCOM i803, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2200, RUGG… |
CVE-2022-0564 | Medium | 5.3 | 2022-02-21 | A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerabil… |
CVE-2022-23643 | Medium | 6.5 | 2022-02-15 | Sourcegraph is a code search and navigation engine. Sourcegraph versions 3.35 and 3.36 reintroduced a previously fixed side-channel vulnerabilitity in the Code… |
CVE-2022-0569 | Medium | 5.3 | 2022-02-14 | Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9. |
CVE-2021-0524 | Medium | 5.5 | 2022-02-11 | In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages due to side channel information disclos… |
CVE-2021-45901 | Medium | 5.3 | 2022-02-10 | The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists. |
CVE-2021-39021 | Medium | 5.3 | 2022-02-02 | IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an una… |
CVE-2022-21659 | Medium | 5.3 | 2022-01-31 | Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnera… |
CVE-2022-24032 | Medium | 5.3 | 2022-01-30 | Adenza AxiomSL ControllerView through 10.8.1 is vulnerable to user enumeration. An attacker can identify valid usernames on the platform because a failed login… |
CVE-2019-25056 | Medium | 5.3 | 2022-01-26 | In Bromite through 78.0.3904.130, there are adblock rules in the release APK; therefore, probing which resources are blocked and which aren't can identify the… |
CVE-2022-23304 | Critical | 9.8 | 2022-01-17 | The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access pattern… |
CVE-2022-23303 | Critical | 9.8 | 2022-01-17 | The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. N… |
CVE-2022-23106 | Medium | 5.3 | 2022-01-12 | Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers t… |
CVE-2022-22120 | Medium | 5.3 | 2022-01-10 | In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email ad… |
CVE-2021-20147 | Medium | 5.3 | 2022-01-03 | ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI. This allows an una… |
CVE-2020-35398 | Medium | 5.3 | 2021-12-23 | An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the err… |
CVE-2021-20049 | High | 7.5 | 2021-12-23 | A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server res… |
CVE-2021-38009 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-44876 | Medium | 5.3 | 2021-12-21 | Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on S… |
CVE-2021-44875 | Medium | 5.3 | 2021-12-21 | Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on S… |
CVE-2021-44554 | Medium | 5.3 | 2021-12-20 | Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /changePassword URI. By accessing the ve… |
CVE-2021-1032 | Low | 3.3 | 2021-12-15 | In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-1031 | Low | 3.3 | 2021-12-15 | In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissi… |
CVE-2021-1030 | Medium | 5.5 | 2021-12-15 | In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permis… |
CVE-2021-1026 | Medium | 5.5 | 2021-12-15 | In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform… |
CVE-2021-1018 | Low | 3.3 | 2021-12-15 | In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel in… |
CVE-2021-1015 | Low | 3.3 | 2021-12-15 | In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side chann… |
CVE-2021-1014 | Medium | 5.5 | 2021-12-15 | In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due… |
CVE-2021-1013 | Medium | 5.5 | 2021-12-15 | In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is inst… |
CVE-2021-1012 | Medium | 5.5 | 2021-12-15 | In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-1009 | Medium | 5.5 | 2021-12-15 | In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due t… |
CVE-2021-1005 | Medium | 5.5 | 2021-12-15 | In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to si… |
CVE-2021-0995 | Low | 3.3 | 2021-12-15 | In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissi… |
CVE-2021-0990 | Low | 3.3 | 2021-12-15 | In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-0989 | Low | 3.3 | 2021-12-15 | In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due… |
CVE-2021-0988 | Low | 3.3 | 2021-12-15 | In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without qu… |
CVE-2021-0987 | Low | 3.3 | 2021-12-15 | In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to si… |
CVE-2021-43823 | Medium | 6.5 | 2021-12-13 | Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source… |
CVE-2021-44848 | Medium | 5.3 | 2021-12-13 | In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username ex… |
CVE-2021-1924 | Critical | 9.0 | 2021-11-12 | Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-43398 | Medium | 5.3 | 2021-11-04 | Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time and private key len… |
CVE-2021-34580 | High | 7.5 | 2021-10-27 | In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted… |
CVE-2021-38476 | Medium | 6.5 | 2021-10-19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This m… |
CVE-2021-38562 | High | 7.5 | 2021-10-18 | Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack again… |
CVE-2021-26318 | Medium | 4.7 | 2021-10-13 | A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space… |
CVE-2021-24651 | High | 7.5 | 2021-10-11 | The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not… |
CVE-2021-37968 | Medium | 4.3 | 2021-10-08 | Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted H… |
CVE-2021-20376 | Medium | 4.3 | 2021-10-07 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in… |
CVE-2021-38153 | Medium | 5.9 | 2021-09-22 | Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such… |
CVE-2021-34576 | Medium | 4.3 | 2021-09-16 | In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumpti… |
CVE-2016-20012 | Medium | 5.3 | 2021-09-15 | OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whet… |
CVE-2021-39189 | Medium | 5.3 | 2021-09-15 | Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password fun… |
CVE-2021-37151 | Medium | 5.3 | 2021-09-01 | CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain authentication policy… |
CVE-2020-25082 | Low | 3.8 | 2021-08-10 | An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private k… |
CVE-2021-38209 | Low | 3.3 | 2021-08-08 | net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked i… |
CVE-2021-3642 | Medium | 5.3 | 2021-08-05 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to… |
CVE-2021-37848 | High | 7.5 | 2021-08-02 | common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison. |
CVE-2021-34575 | High | 7.5 | 2021-08-02 | In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the serv… |
CVE-2021-34556 | Medium | 5.5 | 2021-08-02 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel… |
CVE-2021-35477 | Medium | 5.5 | 2021-08-02 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel… |
CVE-2021-37606 | Medium | 5.3 | 2021-07-30 | Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two… |
CVE-2021-20113 | Medium | 5.3 | 2021-07-30 | An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address that was not registere… |
CVE-2020-36424 | Medium | 4.7 | 2021-07-19 | An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack again… |
CVE-2020-36422 | Medium | 5.3 | 2021-07-19 | An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_… |
CVE-2020-36421 | Medium | 5.3 | 2021-07-19 | An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could b… |
CVE-2021-24117 | Medium | 4.9 | 2021-07-14 | In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain informa… |
CVE-2021-24119 | Medium | 4.9 | 2021-07-14 | In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain informati… |
CVE-2021-24116 | Medium | 4.9 | 2021-07-14 | In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about se… |
CVE-2021-32528 | Medium | 5.3 | 2021-07-07 | Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest c… |
CVE-2021-0089 | Medium | 6.5 | 2021-06-09 | Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. |
CVE-2021-0086 | Medium | 6.5 | 2021-06-09 | Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable information disclo… |
CVE-2021-0001 | Medium | 4.7 | 2021-06-09 | Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local acc… |
CVE-2020-24512 | Low | 3.3 | 2021-06-09 | Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2021-26314 | Medium | 5.5 | 2021-06-09 | Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with inc… |
CVE-2021-26313 | Medium | 5.5 | 2021-06-09 | Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwr… |
CVE-2021-33560 | High | 7.5 | 2021-06-08 | Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_pow… |
CVE-2021-29621 | Medium | 5.3 | 2021-06-07 | Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in database authentication in Flask-AppBuilder <= 3.2.3. Allows for a non… |
CVE-2021-33880 | Medium | 5.9 | 2021-06-06 | The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_aut… |
CVE-2021-33838 | High | 7.5 | 2021-06-04 | Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur… |
CVE-2021-22892 | High | 7.5 | 2021-05-27 | An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed email addresses to be disclosed by enumera… |
CVE-2020-27211 | Medium | 5.7 | 2021-05-21 | Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection (APPROTECT) can… |
CVE-2021-29415 | Medium | 5.5 | 2021-05-21 | The elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone® CryptoCell 310, contained in the NordicSemiconductor nRF52840 through 2… |
CVE-2021-29687 | Medium | 5.3 | 2021-05-20 | IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IB… |
CVE-2021-27342 | Medium | 5.9 | 2021-05-17 | An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumve… |