CWE-212
Overview
- CWE ID
- 212
- CWE Name
- Improper Removal of Sensitive Information Before Storage or Transfer
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.