2548
Nature Type ID Name Page
HasMember 1386 Insecure Operation on Windows Junction / Mount Point 1400 2261
HasMember 1389 Incorrect Parsing of Numbers with Different Radices 1400 2263
HasMember 1419 Incorrect Initialization of Resource 1400 2280
HasMember 1420 Exposure of Sensitive Information during Transient
Execution
1400 2284
HasMember 1421 Exposure of Sensitive Information in Shared
Microarchitectural Structures during Transient Execution
1400 2290
HasMember 1422 Exposure of Sensitive Information caused by Incorrect
Data Forwarding during Transient Execution
1400 2297
HasMember 1423 Exposure of Sensitive Information caused by Shared
Microarchitectural Predictor State that Influences
Transient Execution
1400 2302
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1417: Comprehensive Categorization: Sensitive Information
Exposure
Category ID : 1417
Summary
Weaknesses in this category are related to sensitive information exposure.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 200 Exposure of Sensitive Information to an Unauthorized
Actor
1400 504
HasMember 201 Insertion of Sensitive Information Into Sent Data 1400 514
HasMember 203 Observable Discrepancy 1400 518
HasMember 204 Observable Response Discrepancy 1400 523
HasMember 205 Observable Behavioral Discrepancy 1400 526
HasMember 206 Observable Internal Behavioral Discrepancy 1400 527
HasMember 207 Observable Behavioral Discrepancy With Equivalent
Products
1400 528
HasMember 208 Observable Timing Discrepancy 1400 529
HasMember 209 Generation of Error Message Containing Sensitive
Information
1400 533
HasMember 210 Self-generated Error Message Containing Sensitive
Information
1400 539
HasMember 211 Externally-Generated Error Message Containing
Sensitive Information
1400 541
HasMember 213 Exposure of Sensitive Information Due to Incompatible
Policies
1400 547
HasMember 214 Invocation of Process Using Visible Sensitive
Information
1400 549
HasMember 215 Insertion of Sensitive Information Into Debugging Code 1400 551
CWE Version 4.14
CWE-1418: Comprehensive Categorization: Violation of Secure Design Principles
CWE-1418: Comprehensive Categorization: Violation of Secure Design Principles