CWE - CWE-538: File and Directory Information Leaks (Draft 9)

Home > CWE List > CWE-538 Individual Dictionary Definition (Draft 9)

CWE-538 Individual Dictionary Definition (Draft 9)

Weakness ID

Status: Draft

538 (Weakness Class)

Description

Summary

Weaknesses in this category are related to information leaks in files and directories.

Relationships

Nature	Type	ID	Name
ChildOf	Weakness Class	200	Information Leak (Information Disclosure)
ParentOf	Weakness Variant	527	Information Leak Through CVS Repository
ParentOf	Weakness Variant	528	Information Leak Through Core Dump Files
ParentOf	Weakness Variant	529	Information Leak Through Access Control List Files
ParentOf	Weakness Variant	530	Information Leak Through Backup (.~bk) Files
ParentOf	Weakness Variant	532	Information Leak Through Log Files
ParentOf	Weakness Variant	539	Information Leak Through Persistent Cookies
ParentOf	Weakness Variant	540	Information Leak Through Source Code
ParentOf	Weakness Variant	548	Information Leak Through Directory Listing
ParentOf	Weakness Variant	611	Information Leak Through XML External Entity File Disclosure
ParentOf	Weakness Variant	651	Information Leak through WSDL File

Applicable Platforms

All

Related Attack Patterns

CAPEC-ID	Attack Pattern Name
95	WSDL Scanning

Page Last Updated: April 22, 2008


	CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. This Web site is hosted by The MITRE Corporation. Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us