10024—Information Disclosure - Sensitive Information in URL

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 10024
Risk:: Informational
Type:: Passive
CWE:: CWE-200Exposure of Sensitive Information to an Unauthorized Actor

摘要

The request appeared to contain sensitive information leaked in the URL. This can violate PCI and most organizational compliance policies. You can configure the list of strings for this check to add or remove values specific to your environment.

解决方案

Do not pass sensitive information in URIs.

其他信息

The URL appears to contain US Social Security Number(s)

browse all alerts