Sensitive Data Exposure
Medium · Configuration
OWASP Top 10:2025 (current)
A04:2025 — Cryptographic Failures
Historical Top 10:2021 (not current)
A02:2021 — kept for older reports; use 2025 above.
CWE
CWE-200
CVE / class examples
- Search NVD/CVE for product-specific instances of this CWE
All refs
OWASP A04:2025 · OWASP A02:2021 · CWE-200
Definition
Secrets, PII, or verbose errors leak to clients/logs.
Root cause
Debug modes, verbose errors, public buckets.
Affected components
- Error pages
- Logs
- Backups
- Public object storage
Impact
Account takeover, compliance failure.
Severity
Medium
Safe lab reproduction
Cloud posture labs
Detection methodology
Error-page review, secret scanning.
Evidence examples
- Stack trace with paths
- Secret in JS bundle
Remediation
Redact errors; encrypt sensitive data; vault secrets.
Secure coding examples
Structured logging without secrets.
Related CYNARKS lessons & labs
Primary 2025 class: A04:2025 — Cryptographic Failures
Practise related skills in Labs or deepen on Academy library.