Inclusion of Sensitive Information in an Include File

Opis

If an include file source is accessible, the file can contain usernames and passwords, as well as sensitive information pertaining to the application and system.

Skutki

• Confidentiality

  Read Application Data

Zapobieganie

• Architecture and Design

  Do not store sensitive information in include files.

• Architecture and Design, System Configuration

  Protect include files from being exposed.

Słabość nadrzędna

• CWE-540 Inclusion of Sensitive Information in Source Code

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific