CWE-204—Observable Response Discrepancy

名称

Observable Response Discrepancy

描述

The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.

常见后果

范围：

Confidentiality, Access Control

影响：

Read Application Data, Bypass Protection Mechanism

相关 CWE

• CWE-203Observable Discrepancy