cve.bz

CWE-1266: Improper Scrubbing of Sensitive Data from Decommissioned Device

Filter

The product does not properly provide a capability for the product administrator to remove sensitive data at the time the product is decommissioned. A scrubbing capability could be missing, insufficient, or incorrect.

What the weakness is: CWE-1266 at MITRE. All weaknesses

Related attack patterns (CAPEC): 5
  • CAPEC-37 Retrieve Embedded Sensitive Data Likelihood: High · Severity: Very High
  • CAPEC-150 Collect Data from Common Resource Locations Severity: Medium
  • CAPEC-545 Pull Data from System Resources
  • CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment Likelihood: Low · Severity: Medium
  • CAPEC-675 Retrieve Data from Decommissioned Devices Likelihood: Medium · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-1266, as MITRE names them. Credits.

Ask an AI about CWE-1266

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1266: Improper Scrubbing of Sensitive Data from Decommissioned Device and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1266.html and https://cve.bz/cve/cwe/1266?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

No records match.