CWE-1323: Improper Management of Sensitive Trace Data
Filter
Trace data collected from several sources on the System-on-Chip (SoC) is stored in unprotected locations or transported to untrusted agents.
What the weakness is: CWE-1323 at MITRE. All weaknesses
Related attack patterns (CAPEC): 3
- CAPEC-150 Collect Data from Common Resource Locations Severity: Medium
- CAPEC-167 White Box Reverse Engineering Severity: Medium
- CAPEC-545 Pull Data from System Resources
The attack patterns MITRE's CAPEC relates to CWE-1323, as MITRE names them. Credits.
Ask an AI about CWE-1323
Show the prompt
Explain CWE-1323: Improper Management of Sensitive Trace Data and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1323.html and https://cve.bz/cve/cwe/1323?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.7CVE-2024-54173EPSS 0.1%
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.
- 4.9CVE-2024-49338EPSS 0.4%
IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.