CWE-489: Active Debug Code
The product is released with debugging code still enabled or active.
CWE Reference
CWE in distribution
Browse cwe in distribution with official CWE context and Glexia analysis.
Release 4.20listing
Search And Filters
Browse CWE records
Showing 5 of 5 CWE records.
CWE-527: Exposure of Version-Control Repository to an Unauthorized Control Sphere
The product stores a CVS, git, or other repository in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.
CWE-531: Inclusion of Sensitive Information in Test Code
Accessible test applications can pose a variety of security risks. Since developers or administrators rarely consider that someone besides themselves would even know about the existence of these applications, it is common for them to contain sensitive information or functions.
CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
CWE-615: Inclusion of Sensitive Information in Source Code Comments
While adding general comments is very useful, some programmers tend to leave important data, such as: filenames related to the web application, old links or links which were not meant to be browsed by users, old code fragments, etc.