Common Weakness Enumeration
CWE-1258 Exposure of Sensitive System Information Due to Uncleared Debug Information
Description
The hardware does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations, when debug mode is entered.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1258 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-4mjx-2gh5-ph8h | CVE-2022-39292 | HIGH | - |
Exposure of sensitive Slack webhook URLs in debug logs and traces |
2022-10-10 |
| GHSA-99j7-mhfh-w84p | CVE-2022-31162 | HIGH | - |
Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs |
2022-08-10 |