{
  "slug": "sensitive-data-exposure",
  "url": "https://library.infinity8labs.com/sensitive-data-exposure/",
  "title": "Sensitive data exposure",
  "short": "Sensitive data exposure",
  "aliases": [
    "Information disclosure",
    "Sensitive information exposure",
    "Data leakage",
    "Cryptographic failure"
  ],
  "summary": "Sensitive data exposure occurs when confidential information is collected unnecessarily, returned to the wrong audience, logged, stored, or transmitted without adequate protection. The result may be account takeover, privacy harm, fraud, or large-scale breach.",
  "cwe": [
    "CWE-200",
    "CWE-312"
  ],
  "owasp": "A02:2021 Cryptographic Failures",
  "typical_severity": {
    "min": "low",
    "max": "critical"
  },
  "updated": "2026-10-15",
  "references": [
    {
      "title": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
      "url": "https://cwe.mitre.org/data/definitions/200.html"
    },
    {
      "title": "CWE-312: Cleartext Storage of Sensitive Information",
      "url": "https://cwe.mitre.org/data/definitions/312.html"
    },
    {
      "title": "OWASP Top 10 A02:2021 Cryptographic Failures",
      "url": "https://owasp.org/Top10/A02_2021-Cryptographic_Failures/"
    },
    {
      "title": "OWASP Cryptographic Storage Cheat Sheet",
      "url": "https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html"
    },
    {
      "title": "OWASP Logging Cheat Sheet",
      "url": "https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html"
    },
    {
      "title": "OWASP Secrets Management Cheat Sheet",
      "url": "https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"
    }
  ],
  "sections": [
    "https://library.infinity8labs.com/sensitive-data-exposure/#overview",
    "https://library.infinity8labs.com/sensitive-data-exposure/#impact",
    "https://library.infinity8labs.com/sensitive-data-exposure/#examples",
    "https://library.infinity8labs.com/sensitive-data-exposure/#remediation",
    "https://library.infinity8labs.com/sensitive-data-exposure/#testing",
    "https://library.infinity8labs.com/sensitive-data-exposure/#references"
  ]
}