CWE-199 · Kategoria
Information Management Errors
- Status
- Szkic
- Dodano
- 19 lipca 2006
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to improper handling of sensitive information.
Wpisy w tej grupie
- CWE-201 Insertion of Sensitive Information Into Sent Data
- CWE-204 Observable Response Discrepancy
- CWE-205 Observable Behavioral Discrepancy
- CWE-208 Observable Timing Discrepancy
- CWE-209 Generation of Error Message Containing Sensitive Information
- CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
- CWE-213 Exposure of Sensitive Information Due to Incompatible Policies
- CWE-214 Invocation of Process Using Visible Sensitive Information
- CWE-215 Insertion of Sensitive Information Into Debugging Code
- CWE-312 Cleartext Storage of Sensitive Information
- CWE-319 Cleartext Transmission of Sensitive Information
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
- CWE-524 Use of Cache Containing Sensitive Information
- CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory
- CWE-921 Storage of Sensitive Data in a Mechanism without Access Control
- CWE-1230 Exposure of Sensitive Information Through Metadata
Wpis z katalogu CWE 4.20.