CWE-201 - CERT CVE

CWE-201 - Exposure of Sensitive Information Through Sent Data

The code transmits data to another actor, but the data contains sensitive information that should not be accessible to the actor that is receiving the data.

CAPEC ID Naziv
CAPEC-12 Choosing Message Identifier
CAPEC-217 Exploiting Incorrectly Configured SSL
CAPEC-612 WiFi MAC Address Tracking
CAPEC-613 WiFi SSID Tracking
CAPEC-618 Cellular Broadcast Message Request
CAPEC-619 Signal Strength Tracking
CAPEC-621 Analysis of Packet Timing and Sizes
CAPEC-622 Electromagnetic Side-Channel Attack
CAPEC-623 Compromising Emanations Attack