CWE-201—Insertion of Sensitive Information Into Sent Data

Weakness Name

Insertion of Sensitive Information Into Sent Data

Description

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Common Consequences

Scope:

Confidentiality

Impact:

Read Files or Directories, Read Memory, Read Application Data

Notes:

Sensitive data may be exposed to attackers.

Related Weaknesses

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorHigh
• CWE-202Exposure of Sensitive Information Through Data QueriesMedium
• CWE-209Generation of Error Message Containing Sensitive InformationHigh

Related Alerts

• Multiple HREFs Redirect Detected (Potential Sensitive Information Leak)Low
• Big Redirect Detected (Potential Sensitive Information Leak)Low