CWE-615: Inclusion of Sensitive Information in Source Code Comments
The product's source code includes comments that contain sensitive information, such as filenames related to the application, old links or links that were not meant to be browsed by users, old code fragments, etc.
A kind of CWE-540 Inclusion of Sensitive Information in Source Code.
From the CWE List. © The MITRE Corporation.
Newest
- ibm sterling b2b integrator, sterling file gateway +1 more Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI 4.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 more Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure 4.3 Medium
- xwiki pdf viewer macro, xwikisas macro-pdfviewer, macro pdfviewer +2 more macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author 7.5 High