CWE-214: Invocation of Process Using Visible Sensitive Information

A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

Published:19 Jul 2006

Organization:MITRE

Modified:30 Apr 2026

Related Weakness

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Details