CWE-210

Self-generated Error Message Containing Sensitive Information

Medium

Description

The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.

Potential Impact

How to Fix

Implementation

Debugging information should not make its way into a production release.

Implementation

Debugging information should not make its way into a production release.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-210 vulnerabilities in your codebase.

Get Security Assessment