Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1323: Improper Management of Sensitive Trace Data

Base Draft

Trace data collected from several sources on the
System-on-Chip (SoC) is stored in unprotected locations or
transported to untrusted agents.

How to prevent it (1 mitigation)

  1. Implementation

    Since
    these traces are collected from several security-sensitive
    sources, they must be protected against untrusted
    debuggers.
    Tag traces to indicate owner and debugging privilege level (designer, OEM, or end user) needed to access that trace.

Source: MITRE CWE-1323

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.7
    CVE-2024-54173

    IBM MQ information disclosure

    IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

    IBM MQ
  • Medium 4.4
    CVE-2024-49338

    IBM App Connect Enterprise information disclosure

    IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.

    IBM App Connect Enterprise