CVEbaza.pl › Słownik CWE › CWE-1272

Common Weakness Enumeration

CWE-1272

Sensitive Information Uncleared Before Debug/Power State Transition

Kategoria: BaseCVE: 2

Opis

Produkt dokonuje przejścia stanu zasilania lub debugowania, ale nie usuwa poufnych informacji, które powinny być niedostępne z powodu zmian ograniczeń dostępu do informacji. Może to prowadzić do nieautoryzowanego dostępu do wrażliwych danych.

Description (EN)

The product performs a power or debug state transition, but it does not clear sensitive information that should no longer be accessible due to changes to information access restrictions.

Podatności CVE z CWE-1272 (2)

7.5

CVSS

HIGH

CVE-2020-22656

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to make the Secure Boot in failed attempts state (rfwd).

pub. 2023-01-20

2.4

CVSS

LOW

CVE-2023-41967

Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its configuration through the diagnostic web pages. This issue affects: Gallagher Controller 6000 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)), v8.60 or earlier.

pub. 2023-12-18

Informacje

ID: CWE-1272

Typ: Base

Podatności: 2

MITRE CWE ↗

← Słownik CWE