Common Weakness Enumeration

    CWE Definition / CWE-201

    CWE-201: Insertion of Sensitive Information Into Sent Data

    The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    CWE-209: Generation of Error Message Containing Sensitive Information

    CWE-202: Exposure of Sensitive Information Through Data Queries