CWE-533: Information Leak Through Server Log Files
Information Leak Through Server Log Files
Weakness ID: 533 (Weakness Variant)
Status: Incomplete
Description
Description Summary
A server.log file was found. This can give information on
whatever application left the file. Usually this can give full path names and
system information, and sometimes usernames and passwords.
Time of Introduction
Implementation
Operation
Potential Mitigations
Phase
Description
Consider seriously the sensitivity of the information written into log
files. Do not write secrets into the log files.
Protect log files against unauthorized read/write.
Description
