533
ParentOf 532 Insertion of Sensitive Information into Log File 1241
Weakness Ordinalities
Primary : Developers may insert sensitive information that they do not believe, or they might
forget to remove the sensitive information after it has been processed
Resultant : Separate mistakes or weaknesses could inadvertently make the sensitive
information available to an attacker, such as in a detailed error message that can be read by
an unauthorized party
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Mobile (Prevalence = Undetermined)
Alternate Terms
Information Disclosure : This term is frequently used in vulnerability advisories to describe a
consequence or technical impact, for any vulnerability that has a loss of confidentiality. Often,
CWE-200 can be misused to represent the loss of confidentiality, even when the mistake - i.e.,
the weakness - is not directly related to the mishandling of the information itself, such as an
out-of-bounds read that accesses sensitive memory contents; here, the out-of-bounds read is
CWE Version 4.14
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor