CWE-215Insertion of Sensitive Information Into Debugging Code

Description

The product inserts sensitive information into debugging code.

Common consequences

• Confidentiality→Read Application Data
  Sensitive information could be exposed if the debugging code is not disabled in production.

Potential mitigations

• Implementation
  Do not leave debug statements that could be executed in the source code. Ensure that all debug information is eradicated before releasing the software.
• Architecture and Design
  [object Object]

Related CWEs

Recent CVEs classified under this CWE