CWE-201 通过发送数据的信息暴露 类漏洞列表 387

CWE-201 通过发送数据的信息暴露 类弱点 387 条 CVE 漏洞汇总，含 AI 中文分析。

常见影响 (1)

Confidentiality Read Files or Directories, Read Memory, Read Application Data

Sensitive data may be exposed to attackers.

缓解措施 (4)

Requirements Specify which data in the software should be regarded as sensitive. Consider which types of users should have access to which types of data.

Implementation Ensure that any possibly sensitive data specified in the requirements is verified with designers to ensure that it is either a calculated risk or mitigated elsewhere. Any information that is not necessary to the functionality should be removed in order to lower both the overhead and the possibility of security sensitive data being sent.

System Configuration Setup default error messages so that unexpected errors do not disclose sensitive information.

Architecture and Design Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separatio…

代码示例 (1)

The following is an actual MySQL error statement:

Warning: mysql_pconnect(): Access denied for user: 'root@localhost' (Using password: N1nj4) in /usr/local/www/wi-data/includes/database.inc on line 4

Result · SQL