CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Description
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- High
- Status
- Draft
Common consequences
- Confidentiality
Read Application Data
Potential mitigations
- Architecture and DesignSeparation of Privilege
Compartmentalize the system to have safe areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-201Insertion of Sensitive Information Into Sent Data
- CWE-203Observable Discrepancy
- CWE-209Generation of Error Message Containing Sensitive Information
- CWE-213Exposure of Sensitive Information Due to Incompatible Policies
- CWE-215Insertion of Sensitive Information Into Debugging Code
- CWE-359Exposure of Private Personal Information to an Unauthorized Actor
- CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere
- CWE-538Insertion of Sensitive Information into Externally-Accessible File or Directory
- CWE-1273Device Unlock Credential Sharing
- CWE-1295Debug Messages Revealing Unnecessary Information
- CWE-1431Driving Intermediate Cryptographic State/Results to Hardware Module Outputs
CAPEC attack patterns that exploit it
- CAPEC-13Subverting Environment Variable Values
- CAPEC-22Exploiting Trust in Client
- CAPEC-59Session Credential Falsification through Prediction
- CAPEC-60Reusing Session IDs (aka Session Replay)
- CAPEC-79Using Slashes in Alternate Encoding
- CAPEC-116Excavation
- CAPEC-169Footprinting
- CAPEC-224Fingerprinting
- CAPEC-285ICMP Echo Request Ping
- CAPEC-287TCP SYN Scan
- CAPEC-290Enumerate Mail Exchange (MX) Records
- CAPEC-291DNS Zone Transfers
- CAPEC-292Host Discovery
- CAPEC-293Traceroute Route Enumeration
- CAPEC-294ICMP Address Mask Request
- CAPEC-295Timestamp Request
- CAPEC-296ICMP Information Request
- CAPEC-297TCP ACK Ping
- CAPEC-298UDP Ping
- CAPEC-299TCP SYN Ping
- CAPEC-300Port Scanning
- CAPEC-301TCP Connect Scan
- CAPEC-302TCP FIN Scan
- CAPEC-303TCP Xmas Scan
- CAPEC-304TCP Null Scan
- CAPEC-305TCP ACK Scan
- CAPEC-306TCP Window Scan
- CAPEC-307TCP RPC Scan
- CAPEC-308UDP Scan
- CAPEC-309Network Topology Mapping
- CAPEC-310Scanning for Vulnerable Software
- CAPEC-312Active OS Fingerprinting
- CAPEC-313Passive OS Fingerprinting
- CAPEC-317IP ID Sequencing Probe
- CAPEC-318IP 'ID' Echoed Byte-Order Probe
- CAPEC-319IP (DF) 'Don't Fragment Bit' Echoing Probe
- CAPEC-320TCP Timestamp Probe
- CAPEC-321TCP Sequence Number Probe
- CAPEC-322TCP (ISN) Greatest Common Divisor Probe
- CAPEC-323TCP (ISN) Counter Rate Probe
- CAPEC-324TCP (ISN) Sequence Predictability Probe
- CAPEC-325TCP Congestion Control Flag (ECN) Probe
- CAPEC-326TCP Initial Window Size Probe
- CAPEC-327TCP Options Probe
- CAPEC-328TCP 'RST' Flag Checksum Probe
- CAPEC-329ICMP Error Message Quoting Probe
- CAPEC-330ICMP Error Message Echoing Integrity Probe
- CAPEC-472Browser Fingerprinting
- CAPEC-497File Discovery
- CAPEC-508Shoulder Surfing
- CAPEC-573Process Footprinting
- CAPEC-574Services Footprinting
- CAPEC-575Account Footprinting
- CAPEC-576Group Permission Footprinting
- CAPEC-577Owner Footprinting
- CAPEC-616Establish Rogue Location
- CAPEC-643Identify Shared Files/Directories on System
- CAPEC-646Peripheral Footprinting
- CAPEC-651Eavesdropping