120001-1—Information Disclosure - Sensitive Information in Browser localStorage

PUBLISHEDsecurity alertLow

Client Passive

Metadata

Alert ID:: 120001-1
Risk:: Low
Type:: Client Passive
CWE:: CWE-200Exposure of Sensitive Information to an Unauthorized Actor

摘要

Sensitive Information appears to have been stored in browser localStorage. This can violate PCI and most organizational compliance policies.

For more details see the Client tabs - this information was set directly in the browser and will therefore not necessarily appear in this form in any HTTP(S) messages.

解决方案

Do not store sensitive information in browser storage.

其他信息

The following data (key=value) was set which matches the pattern for credit cards: key=value Note that alerts will only be raised once for each URL + key.

browse all alerts