A process is invoked with sensitive arguments, environment
variables, or other elements that can be seen by other processes on the
operating system.
Extended Description
Many operating systems allow a user to list information about processes
that are owned by other users. This information could include command line
arguments or environment variable settings. When this data contains
sensitive information such as credentials, it might allow other users to
launch an attack against the software or related resources.
Time of Introduction
Architecture and Design
Implementation
Operation
Applicable Platforms
Languages
All
Demonstrative Examples
Example 1
In the Java example below, the password for a keystore file is read
from a system property. If the property is defined on the command line when
the program is invoked (using the -D... syntax), the password may be
displayed in the OS process list.
Kernel race condition allows reading of
environment variables of a process that is still
spawning.
Potential Mitigations
Phase
Description
Compartmentalize your system to have "safe" areas where trust
boundaries can be unambiguously drawn. Do not allow sensitive data to go
outside of the trust boundary and always be careful when interfacing
with a compartment outside of the safe area.
Description
