Sensitive Information Disclosure
Medium · Configuration · CWE-200
Description
Verbose errors, public buckets, debug endpoints leak secrets.
Root cause
Debug mode; misconfigured storage.
Impact
Credential/PII leak.
Detection
DAST; error page review; cloud scans.
Mitigation
Custom errors; access controls; data classification.
Secure coding
Redact logs; scan for secrets.
Safe lab example
Cloud posture labs
Practise related skills in Labs or deepen on Academy library.