2. CWE-732 : Incorrect Permission Assignment for Critical Resource
MIT-39 Ensure that error messages only contain minimal details that are useful to the intended audience, and
nobody else. The messages need to strike the balance between being too cryptic and not being cryptic
enough. They should not necessarily reveal the methods that were used to determine the error. Such