Description

The product stores sensitive information in files or directories that are accessible to actors outside of the intended control sphere.

Applicable Platforms
Language Class: All

Time Of Introduction

• Implementation
• Operation

Related Attack Patterns

• CAPEC-169
• CAPEC-95

Common Consequences

Detection Methods
None

Potential Mitigations

Relationships

Demonstrative Examples
None

White Box Definitions
None

Black Box Definitions
None

Taxynomy Mappings
None

References:

1. Michael Howard David LeBlanc John Viega .24 Deadly Sins of Software Security. McGraw-Hill. Section:'"Sin 12: Information Leakage." Page 191'. Published on 2010.