CWE-204Observable Response Discrepancy

Description

The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.

Common consequences

• Confidentiality,Access Control→Read Application Data,Bypass Protection Mechanism

Potential mitigations

• Architecture and Design
  [object Object]
• Implementation
  [object Object]

Related CWEs

Recent CVEs classified under this CWE