Skip to content

Commit 231110d

Browse files
Update javascript/ql/src/Security/CWE-312/CleartextLogging.qhelp
Co-authored-by: Erik Krogh Kristensen <[email protected]>
1 parent dc5eb40 commit 231110d

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

javascript/ql/src/Security/CWE-312/CleartextLogging.qhelp

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,8 @@
55

66
<overview>
77

8-
<p>If sensitive data is written to a log entry it is exposed. Sensitive data should not be exposed.</p>
8+
<p>If sensitive data is written to a log entry it could be exposed to an attacker
9+
who gains access to the logs.</p>
910

1011
<p>Potential attackers can obtain sensitive user data when the log output is displayed. Additionally that data may
1112
expose system information such as full path names, system information, and sometimes usernames and passwords.</p>

0 commit comments

Comments
 (0)