thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Information Disclosure

Exposure of information to someone not authorized to see it.

Definition

In STRIDE, information disclosure violates confidentiality. Common causes include verbose errors, directory listings, missing encryption, excessive API responses and access control flaws. Mitigations include encryption, least privilege, data minimization and generic error messages.

Example

A stack trace reveals the database server name and framework version to the user.

Exam tip

Verbose error messages are a classic information disclosure answer.

Related terms