cve.bz

CWE-615: Inclusion of Sensitive Information in Source Code Comments

Filter

The product's source code includes comments that contain sensitive information, such as filenames related to the application, old links or links that were not meant to be browsed by users, old code fragments, etc.

What the weakness is: CWE-615 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Ask an AI about CWE-615

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-615: Inclusion of Sensitive Information in Source Code Comments and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/615.html and https://cve.bz/cve/cwe/615?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.3CVE-2026-3158EPSS 0.3%

    IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable…

  2. 4.3CVE-2026-3157EPSS 0.3%

    IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable…

  3. 7.5CVE-2024-52298EPSS 0.7%

    macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Delegate my view right" feature as long as the attacker can view a page whose last author has a…