CWE-651—Exposure of WSDL File Containing Sensitive Information

名称

Exposure of WSDL File Containing Sensitive Information

描述

The Web services architecture may require exposing a Web Service Definition Language (WSDL) file that contains information on the publicly accessible services and how callers of these services should interact with them (e.g. what parameters they expect and what types they return).

An information exposure may occur if any of the following apply:

常见后果

范围：

Confidentiality

影响：

Read Application Data

注释：

The attacker may find sensitive information located in the WSDL file.

相关 CWE

• CWE-538Insertion of Sensitive Information into Externally-Accessible File or Directory