[Forgot Password]
Login  Register Subscribe

24436

 
 

131815

 
 

116471

 
 

909

 
 

91176

 
 

140

Paid content will be excluded from the download.


Download | Alert*
CWE
view XML

Information Exposure Through Debug Log Files

ID: 534Date: (C)2012-05-14   (M)2018-10-10
Type: weaknessStatus: DRAFT
Abstraction Type: Variant





Description

The application does not sufficiently restrict access to a log file that is used for debugging.

Applicable Platforms
None

Time Of Introduction

  • Operation

Common Consequences

ScopeTechnical ImpactNotes
Confidentiality
 
Read application data
 
 

Detection Methods
None

Potential Mitigations

PhaseStrategyDescriptionEffectivenessNotes
Distribution
 
 Remove debug log files before deploying the application into production.
 
  

Relationships

Related CWETypeViewChain
CWE-534 ChildOf CWE-895 Category CWE-888  

Demonstrative Examples
None

White Box Definitions
None

Black Box Definitions
None

Taxynomy Mappings

TaxynomyIdNameFit
Anonymous Tool Vendor (under NDA)  
 
 

References:
None

© SecPod Technologies