CVE-2024-52611

LOW Year: 2024
CVSS v3 Score
3.5
Low
Weakness Type
CWE-209
View all →

Vulnerability Description

The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.

Related Vulnerabilities

CVE-2018-10913

LOW
CVSS:3.5(Low)

An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file.

CWE-2092018

CVE-2021-22193

LOW
CVSS:3.5(Low)

An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project.

CWE-2092021

CVE-2024-3454

LOW
CVSS:3.5(Low)

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric...

CWE-2092024

CVE-2018-17891

LOW
CVSS:3.7(Low)

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users ...

CWE-2092018

CVE-2019-4570

LOW
CVSS:3.7(Low)

IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 166720.

CWE-2092019

CVE-2020-16121

LOW
CVSS:3.3(Low)

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

CWE-2092020