CWE-214Invocation of Process Using Visible Sensitive Information

Description

A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

Common consequences

• Confidentiality→Read Application Data
  When this data contains sensitive information such as credentials, it might allow other users to launch an attack against the product or related resources.

Related CWEs

Recent CVEs classified under this CWE