Sensitive Data Exposure
Medium · Configuration · OWASP A02:2021 · CWE-200
Description
Secrets, PII, or verbose errors leak to clients/logs.
Root cause
Debug modes, verbose errors, public buckets.
Impact
Account takeover, compliance failure.
Detection
Error-page review, secret scanning.
Mitigation
Redact errors; encrypt sensitive data; vault secrets.
Secure coding
Structured logging without secrets.
Safe lab example
Cloud posture labs
Practise related skills in Labs or deepen on Academy library.