Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This rule is a stub.

Several guidelines are instances of this one, including ERR01-J. Do not allow exceptions to expose sensitive informationDRD00. Do not store sensitive information on external storage (SD card) unless encrypted first, and DRD11. Ensure that sensitive data is kept secure.

Noncompliant Code Example

This noncompliant code example shows an example where ...

Code Block
bgColor#FFCCCC
 

 

Compliant Solution

In this compliant solution, ...

Code Block
bgColor#CCCCFF
 

Risk Assessment

Leaking sensitive information outside a trust boundary is not a good idea.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

IDS15-J

Medium

Likely

High

P6

L2

Automated Detection

TBD

Bibliography

[Fortify 2014]123, 4.