Leaking Sensitive Data

A system's security policy determines which information is sensitive. Sensitive data may include user information such as social security or credit card numbers, passwords, or private keys.

Java software components provide many opportunities to output sensitive information. Rules that address the mitigation of sensitive information disclosure include:

• Page:
  ERR01-J. Do not allow exceptions to expose sensitive information
• Page:
  FIO13-J. Do not log sensitive information outside a trust boundary
• Page:
  FIO52-J. Do not store unencrypted sensitive information on the client side
• Page:
  IDS03-J. Do not log unsanitized user input
• Page:
  MSC03-J. Never hard code sensitive information
• Page:
  MSC61-J. Do not use insecure or weak cryptographic algorithms
• Page:
  MSC62-J. Store passwords using a hash function
• Page:
  SER03-J. Do not serialize unencrypted sensitive data
• Page:
  SER04-J. Do not allow serialization and deserialization to bypass the security manager
• Page:
  SER06-J. Make defensive copies of private mutable components during deserialization