VariantDraftCWE-598

CWE-598: Use of HTTP Request With Sensitive Query String

Description

The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.

Abstraction: VariantA weakness tied to a specific language, technology or resource.
Likelihood of exploit: Not rated by MITRE
Status: Draft

Common consequences

Confidentiality
Read Application Data
At a minimum, attackers can garner information from query strings that can be utilized in escalating their method of attack, such as information about the internal workings of the application or database column names. Successful exploitation of query string parameter vulnerabilities could lead to an attacker...

Potential mitigations

Implementation
When sending sensitive information, only include it in the request body or request headers instead of the query string. This may require avoiding use of GET requests.

Related weaknesses

Parent weaknesses

CWE-201Insertion of Sensitive Information Into Sent Data

CAPEC attack patterns that exploit it

CWE 4.20 links no CAPEC attack pattern to this weakness.

Common consequences

Confidentiality

Read Application Data

At a minimum, attackers can garner information from query strings that can be utilized in escalating their method of attack, such as information about the internal workings of the application or database column names. Successful exploitation of query string parameter vulnerabilities could lead to an attacker...