512
Reference Description
https://www.cve.org/CVERecord?id=CVE-2022-0708
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 635 Weaknesses Originally Used by NVD from 2008 to 2016 635 2552
MemberOf 717 OWASP Top Ten 2007 Category A6 - Information
Leakage and Improper Error Handling
629 2332
MemberOf 963 SFP Secondary Cluster: Exposed Data 888 2400
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1345 OWASP Top Ten 2021 Category A01:2021 - Broken
Access Control
1344 2487
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1417 Comprehensive Categorization: Sensitive Information
Exposure
1400 2548
Notes
Maintenance
As a result of mapping analysis in the 2020 Top 25 and more recent versions, this weakness is
under review, since it is frequently misused in mapping to cover many problems that lead to loss
of confidentiality. See Mapping Notes, Extended Description, and Alternate Terms.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Information Leak (information
disclosure)
OWASP Top Ten 2007 A6 CWE More Specific Information Leakage and Improper
Error Handling
WASC 13 Information Leakage
Related Attack Patterns
CAPEC-ID Attack Pattern Name
13 Subverting Environment Variable Values
22 Exploiting Trust in Client
59 Session Credential Falsification through Prediction
60 Reusing Session IDs (aka Session Replay)
79 Using Slashes in Alternate Encoding
116 Excavation
169 Footprinting
224 Fingerprinting
285 ICMP Echo Request Ping
287 TCP SYN Scan
290 Enumerate Mail Exchange (MX) Records
291 DNS Zone Transfers
CWE Version 4.14
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor