CWE-541—Inclusion of Sensitive Information in an Include File

Weakness Name

Inclusion of Sensitive Information in an Include File

Description

If an include file source is accessible, the file can contain usernames and passwords, as well as sensitive information pertaining to the application and system.

Common Consequences

Scope:

Confidentiality

Impact:

Read Application Data

Related Weaknesses

• CWE-540Inclusion of Sensitive Information in Source Code

Related Alerts

• Source Code Disclosure - /WEB-INF FolderHigh
• Source Code Disclosure - Git High
• Properties File Disclosure - /WEB-INF folderHigh
• Source Code Disclosure - File InclusionHigh
• Source Code Disclosure - SVNMedium