Common Weakness Enumeration
CWE-612 Improper Authorization of Index Containing Sensitive Information
Description
The product creates a search index of private or sensitive documents, but it does not properly limit index access to actors who are authorized to see the original information.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-612 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-2xmj-8wmq-7475 | CVE-2025-57756 | MODERATE | - |
Contao discloses sensitive information in the front end search index |
2025-08-28 |
| GHSA-wmx7-x4jp-9jgg | CVE-2022-41918 | MODERATE |
OpenSearch has issue with fine-grained access control of indices backing data streams |
2023-03-07 | |
| GHSA-f4qr-f4xx-hjxw | CVE-2022-35980 | HIGH |
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information |
2022-08-12 |