Information Disclosure
Information Disclosure is about exposing information to people who are not authorised to see it. Information disclosure violates confidentiality.
Typical victims include processes, data stores, or data flows.
Example Threats
- Network monitoring
- directory of filename
- file contents
- API disclosure.