CWE-204—Observable Response Discrepancy

Weakness Name

Observable Response Discrepancy

Description

The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.

Common Consequences

Scope:

Confidentiality, Access Control

Impact:

Read Application Data, Bypass Protection Mechanism

Related Weaknesses

• CWE-203Observable Discrepancy