1642
Nature Type ID Name Page
MemberOf 1355 OWASP Top Ten 2021 Category A09:2021 - Security
Logging and Monitoring Failures
1344 2496
MemberOf 1413 Comprehensive Categorization: Protection Mechanism
Failure
1400 2542
References
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-1307]Center for Internet Security. "CIS Microsoft Azure Foundations Benchmark version
1.5.0". 2022 August 6. < https://www.cisecurity.org/benchmark/azure >.2023-01-19.
[REF-1308]Microsoft. "Enable and manage Azure Storage Analytics logs (classic)". 2023 January
3. < https://learn.microsoft.com/en-us/azure/storage/common/manage-storage-analytics-logs
>.2023-01-24.
CWE-779: Logging of Excessive Data
Weakness ID : 779
Structure : Simple
Abstraction : Base
Description
The product logs too much information, making log files hard to process and possibly hindering
recovery efforts or forensic analysis after an attack.
Extended Description
While logging is a good practice in general, and very high levels of logging are appropriate for
debugging stages of development, too much logging in a production environment might hinder
a system administrator's ability to detect anomalous conditions. This can provide cover for an
attacker while attempting to penetrate a system, clutter the audit trail for forensic analysis, or make
it more difficult to debug problems in a production environment.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 400 Uncontrolled Resource Consumption 964
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1009 Audit 2424
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1210 Audit / Logging Errors 2475
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Likelihood Of Exploit
CWE Version 4.14
CWE-779: Logging of Excessive Data
CWE-779: Logging of Excessive Data