Exposure of Sensitive Information Through Data Queries

Opis

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

In situations where data should not be tied to individual users, but a large number of users should be able to make queries that "scrub" the identity of users, it may be possible to get information about a user -- e.g., by specifying search terms that are known to be unique to that user.

Skutki

• Confidentiality

  Read Files or Directories; Read Application Data

  Sensitive information may possibly be leaked through data queries accidentally.

Zapobieganie

• Architecture and Design

  This is a complex topic. See the [REF-1492] for a good discussion of best practices.

Przykłady podatności

• CVE-2022-41935 Wiki product allows an adversary to discover filenames via a series of queries starting with one letter and then iteratively extending the match.

Słabość nadrzędna

• CWE-1230 Exposure of Sensitive Information Through Metadata

Kiedy powstaje

• Architecture and Design
• Implementation

Dotyczy

Not Language-Specific

Uwagi

The relationship between CWE-202 and CWE-612 needs to be investigated more closely, as they may be different descriptions of the same kind of problem. CWE-202 is also being considered for deprecation, as it is not clearly described and may have been misunderstood by CWE users. It could be argued that this issue is better covered by CAPEC; an attacker can utilize their data-query privileges to perform this kind of operation, and if the attacker should not be allowed to perform the operation - or if the sensitive data should not have been made accessible at all - then that is more appropriately classified as a separate CWE related to authorization (see the parent, CWE-1230).

Źródła

1. The CLASP Application Security Process — Secure Software, Inc., 2005
2. Translucent Databases — Peter Wayner, 2002