Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CAPEC-215:Fuzzing for application mapping
Attack Pattern ID:215
Version:v3.9
Attack Pattern Name:Fuzzing for application mapping
Abstraction:Detailed
Status:Draft
Likelihood of Attack:High
Typical Severity:Low
DetailsContent HistoryRelated WeaknessesReports
2Weaknesses found
CWE-209
Generation of Error Message Containing Sensitive Information
ShareView Details
Generation of Error Message Containing Sensitive Information
Likelihood of Exploit-High
Mapping-Allowed
Abstraction-Base
Found in463CVEs

The product generates an error message that includes sensitive information about its environment, users, or associated data.

Impacts-
Read Application Data
Tags-
High exploitEnvironment HardeningCompilation or Build HardeningAttack Surface ReductionRead Application Data (impact)
As Seen In-
CWE Cross-section
CWE-532
Insertion of Sensitive Information into Log File
ShareView Details
Insertion of Sensitive Information into Log File
Likelihood of Exploit-Medium
Mapping-Allowed
Abstraction-Base
Found in963CVEs

The product writes sensitive information to a log file.

Impacts-
Read Application Data
Tags-
Medium exploitRead Application Data (impact)
As Seen In-
Not Available