Two threat patterns that exploit "security misconfiguration" and "sensitive data exposure" vulnerabilities
Rohini Sulatycki, Eduardo B. Fernández · 2015
We present threat patterns that describe attacks against applications that take advantage of security misconfigurations in the application stack and applications that expose sensitive data. These patterns provide insight on how to build and configure applications that might contain sensitive data and are also helpful in evaluating the security of existing applications.