CWE-212Improper Removal of Sensitive Information Before Storage or Transfer

Description

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

[object Object]

Common consequences

• Confidentiality→Read Files or Directories,Read Application Data
  Sensitive data may be exposed to an unauthorized actor in another control sphere. This may have a wide range of secondary consequences that will depend on what data is exposed. One possibility is the exposure of system data - such as file l

Potential mitigations

• Requirements
  Clearly specify which information should be regarded as private or sensitive, and require that the product offers functionality that allows the user to cleanse the sensitive information from the resource before it is published or exported to other parties.
• Architecture and Design
  [object Object]
• Implementation,Operation
  [object Object]
• Implementation
  Use naming conventions and strong types to make it easier to spot when sensitive data is being used. When creating structures, objects, or other complex entities, separate the sensitive and non-sensitive data as much as possible.
• Implementation
  Avoid errors related to improper resource shutdown or release (CWE-404), which may leave the sensitive data within the resource if it is in an incomplete state.

Related CWEs

Recent CVEs classified under this CWE