CWE-497
Overview
- CWE ID
- 497
- CWE Name
- Exposure of Sensitive System Information to an Unauthorized Control Sphere
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The application does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the application does.
Extended Description
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 200 | 1000 | ChildOf | Primary |