CWE-210β€”Self-generated Error Message Containing Sensitive Information

PUBLISHEDweakness record
released 2006-07-19 Β· last modified 2025-12-11

Metadata

CWE ID:
CWE-210
Abstraction:
Base
Structure:
Simple
Status:
Draft
Release Date:
2006-07-19
Latest Modification Date:
2025-12-11

Weakness Name

Self-generated Error Message Containing Sensitive Information

Description

The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.

Common Consequences

Scope:
Confidentiality
Impact:
Read Application Data

Related Weaknesses