CWE-211 Externally-Generated Error Message Containing Sensitive Information

base

The product performs an operation that triggers an external diagnostic or error message that is not directly generated or controlled by the product, such as an error generated by the programming language interpreter that a software application uses. The error can contain sensitive system information.

01

parent weaknesses

Broader classes this is a kind of.

02

child weaknesses

More specific entries beneath this one.

03

source

Where this definition is published.

MITREUS
scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan