CWE-202

Exposure of Sensitive Information Through Data Queries

Medium

Description

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

Potential Impact

How to Fix

Architecture and Design

This is a complex topic. See the [REF-1492] for a good discussion of best practices.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-202 vulnerabilities in your codebase.

Get Security Assessment