COMMON WEAKNESS ENUMERATIONIncomplete

CWE-531

Inclusion of Sensitive Information in Test Code

Accessible test applications can pose a variety of security risks. Since developers or administrators rarely consider that someone besides themselves would even know about the existence of these applications, it is common for them to contain sensitive information or functions.

Soyutlama

Variant

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

Accessible test applications can pose a variety of security risks. Since developers or administrators rarely consider that someone besides themselves would even know about the existence of these applications, it is common for them to contain sensitive information or functions.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Testing

Risk

Başarılı sömürü neye yol açar?

Read Application Data

Etkilenen güvenlik alanları: Confidentiality

Savunma

Nasıl önlenir ve çözülür?

Distribution · Installation

Birden fazla yaşam döngüsü evresinde uygulanacak savunma

Detay
Remove test code before deploying the application into production.