Page History

C++ Secure Coding Standard

ERR12-CPP. Do not allow exceptions to transmit sensitive information.

MITRE CWE

CWE ID -209, "Information Exposure Through an Error Message"

CWE ID -600, "Uncaught Exception in Servlet"

CWE ID -497, "Exposure of System Data to an Unauthorized Control Sphere"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="05c834da7267ade4-8b8422c1-4b494726-a2358573-0239acd8e22442b1e20a0d26"><ac:plain-text-body><![CDATA[

[[Gong 2003

AA. Bibliography#Gong 03]]

9.1 Security Exceptions

]]></ac:plain-text-body></ac:structured-macro>