1376
Potential Mitigations
Phase: Distribution
Remove comments which have sensitive information about the design/implementation of the
application. Some of the comments may be exposed to the user and affect the security posture
of the application.
Demonstrative Examples
Example 1:
The following comment, embedded in a JSP, will be displayed in the resulting HTML output.
Example Language: JSP (Bad)
<!-- FIXME: calling this with more than 30 args kills the JDBC server -->
Observed Examples
Reference Description
CVE-2007-6197 Version numbers and internal hostnames leaked in HTML comments.
https://www.cve.org/CVERecord?id=CVE-2007-6197
CVE-2007-4072 CMS places full pathname of server in HTML comment.
https://www.cve.org/CVERecord?id=CVE-2007-4072
CVE-2009-2431 blog software leaks real username in HTML comment.
https://www.cve.org/CVERecord?id=CVE-2009-2431
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 963 SFP Secondary Cluster: Exposed Data 888 2400
MemberOf 1417 Comprehensive Categorization: Sensitive Information
Exposure
1400 2548
CWE-616: Incomplete Identification of Uploaded File Variables (PHP)
Weakness ID : 616
Structure : Simple
Abstraction : Variant
Description
The PHP application uses an old method for processing uploaded files by referencing the four
global variables that are set for each file (e.g. $varname, $varname_size, $varname_name,
$varname_type). These variables could be overwritten by attackers, causing the application to
process unauthorized files.
Extended Description
These global variables could be overwritten by POST requests, cookies, or other methods of
populating or overwriting these variables. This could be used to read or process arbitrary files by
providing values such as "/etc/passwd".
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
CWE Version 4.14
CWE-616: Incomplete Identification of Uploaded File Variables (PHP)
CWE-616: Incomplete Identification of Uploaded File Variables (PHP)