CWE-1417 · Kategoria
Comprehensive Categorization: Sensitive Information Exposure
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 3 kwietnia 2025
Opis
Weaknesses in this category are related to sensitive information exposure.
Wpisy w tej grupie
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- CWE-201 Insertion of Sensitive Information Into Sent Data
- CWE-203 Observable Discrepancy
- CWE-204 Observable Response Discrepancy
- CWE-205 Observable Behavioral Discrepancy
- CWE-206 Observable Internal Behavioral Discrepancy
- CWE-207 Observable Behavioral Discrepancy With Equivalent Products
- CWE-208 Observable Timing Discrepancy
- CWE-209 Generation of Error Message Containing Sensitive Information
- CWE-210 Self-generated Error Message Containing Sensitive Information
- CWE-211 Externally-Generated Error Message Containing Sensitive Information
- CWE-213 Exposure of Sensitive Information Due to Incompatible Policies
- CWE-214 Invocation of Process Using Visible Sensitive Information
- CWE-215 Insertion of Sensitive Information Into Debugging Code
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
- CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable
- CWE-531 Inclusion of Sensitive Information in Test Code
- CWE-532 Insertion of Sensitive Information into Log File
- CWE-535 Exposure of Information Through Shell Error Message
- CWE-536 Servlet Runtime Error Message Containing Sensitive Information
- CWE-537 Java Runtime Error Message Containing Sensitive Information
- CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory
- CWE-540 Inclusion of Sensitive Information in Source Code
- CWE-541 Inclusion of Sensitive Information in an Include File
- CWE-548 Exposure of Information Through Directory Listing
- CWE-550 Server-generated Error Message Containing Sensitive Information
- CWE-598 Use of HTTP Request With Sensitive Query String
- CWE-615 Inclusion of Sensitive Information in Source Code Comments
- CWE-651 Exposure of WSDL File Containing Sensitive Information
- CWE-1254 Incorrect Comparison Logic Granularity
- CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks
- CWE-1273 Device Unlock Credential Sharing
- CWE-1295 Debug Messages Revealing Unnecessary Information
- CWE-1300 Improper Protection of Physical Side Channels
- CWE-1431 Driving Intermediate Cryptographic State/Results to Hardware Module Outputs
Źródła
Wpis z katalogu CWE 4.20.