COMMON WEAKNESS ENUMERATIONDraft

CWE-210

Self-generated Error Message Containing Sensitive Information

The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Architecture and Design

Yaşam döngüsü evresi

Implementation

REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Risk

Başarılı sömürü neye yol açar?

Read Application Data

Etkilenen güvenlik alanları: Confidentiality

Savunma

Nasıl önlenir ve çözülür?

Implementation · Build and Compilation

Compilation or Build Hardening

Detay
Debugging information should not make its way into a production release.

Implementation · Build and Compilation

Environment Hardening

Detay
Debugging information should not make its way into a production release.