Information Disclosure Detection
Detection Workflow
- Identify sensitive data flows: Find where sensitive data is handled, trace data through application, identify all output points
- Check logging practices: Analyze log statements, check error messages, review debug output
- Assess exposure points: Identify all user-facing output, check external API responses, review file system artifacts
- Evaluate impact: What information is disclosed? How sensitive is it? Who can access it?
Key Patterns
- Sensitive data in logs: passwords, keys, stack traces in production logs
- Error message disclosure: detailed errors revealing system info, paths, database queries
- Memory disclosure: uninitialized memory reads, out-of-bounds reads, format string leaks
- Storage disclosure: plaintext storage, weak encryption, insecure file permissions
Output Format
Report with: id, type, subtype, severity, confidence, location, sensitive data type, disclosure point, vulnerability description, exposure scope, risk, mitigation.
Severity Guidelines
- CRITICAL: Disclosure of cryptographic keys or passwords
- HIGH: Disclosure of sensitive user data
- MEDIUM: Disclosure of system information
- LOW: Disclosure of minor debug information
See Also
patterns.md - Detailed detection patterns and exploitation scenariosexamples.md - Example analysis cases and code samplesreferences.md - CWE references and mitigation strategies
1---2name: detecting-information-disclosure3description: Detects information disclosure vulnerabilities including sensitive data in logs, error message exposure, and memory leaks. Use when analyzing logging practices, error handling, or investigating data leakage issues.4---5
6# Information Disclosure Detection
7
8## Detection Workflow
9
101. **Identify sensitive data flows**: Find where sensitive data is handled, trace data through application, identify all output points
112. **Check logging practices**: Analyze log statements, check error messages, review debug output
123. **Assess exposure points**: Identify all user-facing output, check external API responses, review file system artifacts
134. **Evaluate impact**: What information is disclosed? How sensitive is it? Who can access it?
14
15## Key Patterns
16
17- Sensitive data in logs: passwords, keys, stack traces in production logs
18- Error message disclosure: detailed errors revealing system info, paths, database queries
19- Memory disclosure: uninitialized memory reads, out-of-bounds reads, format string leaks
20- Storage disclosure: plaintext storage, weak encryption, insecure file permissions
21
22## Output Format
23
24Report with: id, type, subtype, severity, confidence, location, sensitive data type, disclosure point, vulnerability description, exposure scope, risk, mitigation.
25
26## Severity Guidelines
27
28- **CRITICAL**: Disclosure of cryptographic keys or passwords
29- **HIGH**: Disclosure of sensitive user data
30- **MEDIUM**: Disclosure of system information
31- **LOW**: Disclosure of minor debug information
32
33## See Also
34
35- `patterns.md` - Detailed detection patterns and exploitation scenarios
36- `examples.md` - Example analysis cases and code samples
37- `references.md` - CWE references and mitigation strategies
aibot88