SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CWE

Information Exposure Through Debug Log Files

Description

The application does not sufficiently restrict access to a log file that is used for debugging.

Applicable Platforms
None

Time Of Introduction

Common Consequences

Scope	Technical Impact	Notes
Confidentiality	Read application data

Detection Methods
None

Potential Mitigations

Phase	Strategy	Description	Effectiveness	Notes
Distribution		Remove debug log files before deploying the application into production.

Relationships

Related CWE	Type	View	Chain
CWE-534 ChildOf CWE-895	Category	CWE-888

Demonstrative Examples
None

White Box Definitions
None

Black Box Definitions
None

Taxynomy Mappings

Taxynomy	Id	Name	Fit
Anonymous Tool Vendor (under NDA)

References:
None