Limit Exposure

Opis

Weaknesses in this category are related to the design and architecture of the entry points to a system. Frequently these deal with minimizing the attack surface through designing the system with the least needed amount of entry points. The weaknesses in this category could lead to a degradation of a system's defenses if they are not addressed when designing or implementing a secure architecture.

Wpisy w tej grupie

• CWE-210 Self-generated Error Message Containing Sensitive Information
• CWE-211 Externally-Generated Error Message Containing Sensitive Information
• CWE-214 Invocation of Process Using Visible Sensitive Information
• CWE-550 Server-generated Error Message Containing Sensitive Information
• CWE-829 Inclusion of Functionality from Untrusted Control Sphere
• CWE-830 Inclusion of Web Functionality from an Untrusted Source

Źródła