CWE-541—Inclusion of Sensitive Information in an Include File

名称

Inclusion of Sensitive Information in an Include File

描述

If an include file source is accessible, the file can contain usernames and passwords, as well as sensitive information pertaining to the application and system.

常见后果

范围：

Confidentiality

影响：

Read Application Data

相关 CWE

• CWE-540Inclusion of Sensitive Information in Source Code

相关警报

• Source Code Disclosure - File InclusionHigh
• Source Code Disclosure - SVNMedium
• Source Code Disclosure - /WEB-INF FolderHigh
• Properties File Disclosure - /WEB-INF folderHigh
• Source Code Disclosure - Git High