CWE-598: Use of HTTP Request With Sensitive Query String
The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
A kind of CWE-201 Insertion of Sensitive Information Into Sent Data.
From the CWE List. © The MITRE Corporation.
Newest
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreAn Information Exposure Through Query Strings in GET Request issue was discovered in Belden...6.5 Medium
- netiq identity manager applications, identity manager +1 moreNovell Identity Manager User Application get request url contains the session token.4.3 Medium
- acti camera firmware, acti corporation d, b, i, and e series cameras +1 moreACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have...9.8 Critical
- elastic kibana, kibana x-pack security +1 moreIn Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the...6.5 Medium