CWE-598.

Sensitive Data in URL

• SICK AG SICK Field Analytics
• CWE-598

Use of GET Request Method With sensitive Query Strings

• Tridium Niagara Framework
• Tridium Niagara Enterprise Security
• CWE-598

Sensitive information submitted using GET method

• ABB ANC
• ABB ANC-L
• CWE-598

Moodle's mod_data edit/delete pages pass CSRF token in GET parameter

• CWE-598

<4.3.12 || >=4.3.0-beta, <4.3.12 || >=4.4.0-beta, <4.4.8 || >=4.5.0-beta, <4.5.4 · fixed in 4.3.12, 4.4.8, 4.5.4

Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is in...

• CWE-598

<5.11 · fixed in 5.11

In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.

• CWE-598

BlackVue App API deviceDelete get request method with sensitive query strings

• BlackVue App
• CWE-598

Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using the GET method to process requests that contain sensitive i…

• CWE-598

Multiple vulnerabilities in Trivision Camera NC227WF

• Trivision Camera NC227WF
• CWE-598

Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection.

• CWE-598

Outback Power Mojave Inverter Use of GET Request Method With Sensitive Query Strings

• Outback Power Mojave Inverter
• CWE-598

Zettler 130.8005: A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered…

• Zettler 130.8005
• CWE-598

TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings

• TP-Link TL-SG108E
• CWE-598

An issue was discovered in Optimizely Configured Commerce before 5.2.2408.

• CWE-598

IBM TXSeries for Multiplatforms information disclosure

• IBM TXSeries for Multiplatforms
• CWE-598

CSRF token leaked in URL parameters

• Checkmk
• CWE-598

exacqVison - Token Disclosed in URL

• Johnson Controls exacqVision
• CWE-598

IBM InfoSphere Information Server information disclosure

• IBM InfoSphere Information Server
• CWE-598

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices.

• CWE-598

dectalk-tts Uses Unencrypted HTTP Request

• Weak cryptography or TLS
• CWE-300

>=1.0.0, <1.0.1 · fixed in 1.0.1

Rapid7 InsightVM Sensitive Information Exposure via URL

• Rapid7 InsightVM
• CWE-598

IBM Maximo Application Suite information disclosure

• IBM Maximo Application Suite
• IBM Maximo Asset Management
• CWE-598

Session Token in URL in directus

• Information disclosure
• CWE-598

<10.10.0 · fixed in 10.10.0

HCL Sametime is impacted by a sensitive information disclosure

• HCL Software HCL Sametime
• CWE-598

IBM PowerSC information disclosure

• IBM PowerSC
• CWE-598

Backup password in GET parameter

• Checkmk GmbH Checkmk Appliance
• CWE-598

Ray Missing Authorization vulnerability

• Broken access control
• CWE-598

<2.8.1 · fixed in 2.8.1

Fortinet FortiOS: A use of GET request method with sensitive query strings vulnerability in Fortinet…

• Fortinet FortiOS
• CWE-598

NVIDIA Omniverse Workstation Launcher: NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in…

• NVIDIA Omniverse Workstation Launcher
• CWE-598

Site-Passwords in GET parameters

• Tribe29 Checkmk Appliance
• Information disclosure
• CWE-598

Dell PowerPath Management Appliance: PowerPath Management Appliance with versions 3.3, 3.2*…

• Dell PowerPath Management Appliance
• CWE-598

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests.

• Dell CloudLink
• CWE-598

GTA URLs issued by LMM WEB API may leak information

• Secomea GateManager
• CWE-598

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings.

• Dell AppSync
• CWE-598

Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability.

• Dell EMC Streaming Data Platform
• CWE-598

Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.2…

• Dell PowerScale OneFS
• CWE-598

RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability.

• Dell RSA Archer
• CWE-598

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability.

• Dell RSA Identity Governance & Lifecycle
• CWE-598

Kunbus PR100088 Modbus gateway: An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088…

• Kunbus PR100088 Modbus gateway
• CWE-598

Entes EMG12: Entes EMG12 versions 2.57 and prior an information exposure through query strings…

• Entes EMG12
• CWE-598

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches.

• Hirschmann Automation and Control GmbH Classic Platform Switches
• CWE-598

Novell Identity Manager User Application get request url contains the session token.

• NetIQ Identity Manager Applications
• CWE-598

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such…

• ACTi Corporation ACTi D, B, I, and E series cameras
• CWE-598

Elastic Kibana X-Pack Security: In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana…

• Elastic Kibana X-Pack Security
• CWE-598