CWE-532 — Insertion of Sensitive Information into Log File
CWE-532: Insertion of Sensitive Information into Log File
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Incomplete |
| Likelihood of exploit | Medium |
Description
The product writes sensitive information to a log file.
Common consequences
- Confidentiality: Read Application Data
Mitigations
Architecture and Design — Consider seriously the sensitivity of the information written into log files. Do not write secrets into the log files.
Distribution — Remove debug log files before deploying the application into production.
Operation — Protect log files against unauthorized read/write.
Implementation — Adjust configurations appropriately when software is transitioned from a debug state to production.
References
- CWE page: https://cwe.mitre.org/data/definitions/532.html
- CWE list: https://cwe.mitre.org/data/index.html