Description
When trying to keep information confidential, an attacker can often infer some of the information by using statistics.
In situations where data should not be tied to individual users, but a large number of users should be able to make queries that "scrub" the identity of users, it may be possible to get information about a user -- e.g., by specifying search terms that are known to be unique to that user.
Potential Impact
Confidentiality
Read Files or Directories, Read Application Data
Mitigations & Prevention
This is a complex topic. See the [REF-1492] for a good discussion of best practices.
Real-World CVE Examples
| CVE ID | Description |
|---|---|
| CVE-2022-41935 | Wiki product allows an adversary to discover filenames via a series of queries starting with one letter and then iteratively extending the match. |
Related Weaknesses
Taxonomy Mappings
- CLASP: — Accidental leaking of sensitive information through data queries
Frequently Asked Questions
What is CWE-202?
CWE-202 (Exposure of Sensitive Information Through Data Queries) is a software weakness identified by MITRE's Common Weakness Enumeration. It is classified as a Base-level weakness. When trying to keep information confidential, an attacker can often infer some of the information by using statistics.
How can CWE-202 be exploited?
Attackers can exploit CWE-202 (Exposure of Sensitive Information Through Data Queries) to read files or directories, read application data. This weakness is typically introduced during the Architecture and Design, Implementation phase of software development.
How do I prevent CWE-202?
Key mitigations include: This is a complex topic. See the [REF-1492] for a good discussion of best practices.
What is the severity of CWE-202?
CWE-202 is classified as a Base-level weakness (Medium abstraction). It has been observed in 1 real-world CVEs.