2071
CanPrecede 201 Insertion of Sensitive Information Into Sent Data 514
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 669 Incorrect Resource Transfer Between Spheres 1471
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1015 Limit Access 2430
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 199 Information Management Errors 2312
MemberOf 452 Initialization and Cleanup Errors 2327
Weakness Ordinalities
Primary :
Resultant :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality Read Files or Directories
Read Application Data
Sensitive data may be exposed to an unauthorized actor
in another control sphere. This may have a wide range
of secondary consequences which will depend on what
data is exposed. One possibility is the exposure of system
data allowing an attacker to craft a specific, more effective
attack.
Potential Mitigations
Phase: Requirements
Clearly specify which information should be regarded as private or sensitive, and require that
the product offers functionality that allows the user to cleanse the sensitive information from the
resource before it is published or exported to other parties.
Phase: Architecture and Design
Strategy = Separation of Privilege
Compartmentalize the system to have "safe" areas where trust boundaries can be
unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always
be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate
compartmentalization is built into the system design, and the compartmentalization allows for and
reinforces privilege separation functionality. Architects and designers should rely on the principle
of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
CWE Version 4.14
CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer
CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer