Weakness (CWE)

CWE-532: Insertion of Sensitive Information into Log File

Base Incomplete

The product writes sensitive information to a log file.

How to prevent it (4 mitigations)

Architecture and Design, Implementation

Consider seriously the sensitivity of the information written into log files. Do not write secrets into the log files.
Distribution

Remove debug log files before deploying the application into production.
Operation

Protect log files against unauthorized read/write.
Implementation

Adjust configurations appropriately when software is transitioned from a debug state to production.

Nothing found.