CWE-537

Java Runtime Error Message Containing Sensitive Information
AI Translation Available

In many cases, an attacker can leverage the conditions that cause unhandled exception errors in order to gain unauthorized access to the system.

Status
incomplete
Abstraction
variant
Java

Common Consequences

confidentiality
Impacts
read application data

Potential Mitigations

Phases:
implementation
Descriptions:
• Do not expose sensitive error information to the user.