Invocation of Process Using Visible Sensitive Information

Opis

A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

Many operating systems allow a user to list information about processes that are owned by other users. Other users could see information such as command line arguments or environment variable settings. When this data contains sensitive information such as credentials, it might allow other users to launch an attack against the product or related resources.

Skutki

• Confidentiality

  Read Application Data

Przykłady podatności

• CVE-2023-38994 IAM product includes LDAP password in a process call, allowing local users to obtain the password
• CVE-2005-1387 password passed on command line
• CVE-2005-2291 password passed on command line
• CVE-2001-1565 username/password on command line allows local users to view via "ps" or other process listing programs
• CVE-2004-1948 Username/password on command line allows local users to view via "ps" or other process listing programs.
• CVE-1999-1270 PGP passphrase provided as command line argument.
• CVE-2004-1058 Kernel race condition allows reading of environment variables of a process that is still spawning.
• CVE-2021-32638 Code analysis product passes access tokens as a command-line parameter or through an environment variable, making them visible to other processes via the ps command.

Słabość nadrzędna

• CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

Kiedy powstaje

• Architecture and Design
• Implementation — REALIZATION: This weakness is caused during implementation of an architectural security tactic.
• Operation

Dotyczy

Not Language-Specific

Uwagi

Under-studied, especially environment variables.