1252
Weakness ID : 540
Structure : Simple
Abstraction : Base
Description
Source code on a web server or repository often contains sensitive information and should
generally not be accessible to users.
Extended Description
There are situations where it is critical to remove source code from an area or server. For example,
obtaining Perl source code on a system allows an attacker to understand the logic of the script and
extract extremely useful information such as code bugs or logins and passwords.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 538 Insertion of Sensitive Information into Externally-Accessible
File or Directory