CWE-922 - Insecure Storage of Sensitive Information
CWE-922
- Abstraction:
- Class
- Structure:
- Simple
- Status:
- Incomplete
- Weakness Name
Insecure Storage of Sensitive Information
- Description
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
If read access is not properly restricted, then attackers can steal the sensitive information. If write access is not properly restricted, then attackers can modify and possibly delete the data, causing incorrect results and possibly a denial of service.
- Common Consequences
Scope: Confidentiality
Impact: Read Application Data, Read Files or Directories
Notes: Attackers can read sensitive information by accessing the unrestricted storage mechanism.
Scope: Integrity
Impact: Modify Application Data, Modify Files or Directories
Notes: Attackers can overwrite sensitive information by accessing the unrestricted storage mechanism.
- Related Weaknesses
- Release Date:
- 2013-07-17
- Latest Modification Date:
- 2023-10-26
Free security scan for your website