538
Reference Description
CVE-2007-1409 Direct request to library file in web application triggers pathname leak in error
message.
https://www.cve.org/CVERecord?id=CVE-2007-1409
CVE-2008-3060 Malformed input to login page causes leak of full path when IMAP call fails.
https://www.cve.org/CVERecord?id=CVE-2008-3060
CVE-2005-0603 Malformed regexp syntax leads to information exposure in error message.
https://www.cve.org/CVERecord?id=CVE-2005-0603
CVE-2017-9615 verbose logging stores admin credentials in a world-readablelog file
https://www.cve.org/CVERecord?id=CVE-2017-9615
CVE-2018-1999036SSH password for private key stored in build log
https://www.cve.org/CVERecord?id=CVE-2018-1999036
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 717 OWASP Top Ten 2007 Category A6 - Information
Leakage and Improper Error Handling
629 2332
MemberOf 728 OWASP Top Ten 2004 Category A7 - Improper Error
Handling
711 2337
MemberOf 731 OWASP Top Ten 2004 Category A10 - Insecure
Configuration Management
711 2339
MemberOf 751 2009 Top 25 - Insecure Interaction Between
Components
750 2352
MemberOf 801 2010 Top 25 - Insecure Interaction Between
Components
800 2354
MemberOf 815 OWASP Top Ten 2010 Category A6 - Security
Misconfiguration
809 2358
MemberOf 851 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 8 - Exceptional Behavior (ERR)
844 2365
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 880 CERT C++ Secure Coding Section 12 - Exceptions and
Error Handling (ERR)
868 2379
MemberOf 884 CWE Cross-section 884 2567
MemberOf 933 OWASP Top Ten 2013 Category A5 - Security
Misconfiguration
928 2391
MemberOf 963 SFP Secondary Cluster: Exposed Data 888 2400
MemberOf 1032 OWASP Top Ten 2017 Category A6 - Security
Misconfiguration
1026 2438
MemberOf 1348 OWASP Top Ten 2021 Category A04:2021 - Insecure
Design
1344 2491
MemberOf 1417 Comprehensive Categorization: Sensitive Information
Exposure
1400 2548
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Accidental leaking of sensitive
information through error messages
OWASP Top Ten 2007 A6 CWE More Specific Information Leakage and Improper
Error Handling
OWASP Top Ten 2004 A7 CWE More Specific Improper Error Handling
OWASP Top Ten 2004 A10 CWE More Specific Insecure Configuration Management
CWE Version 4.14
CWE-210: Self-generated Error Message Containing Sensitive Information
CWE-210: Self-generated Error Message Containing Sensitive Information