Page Information

Title:	FIO13-J. Do not log sensitive information outside a trust boundary
Author:	Dhruv Mohindra	Feb 16, 2009
Last Changed by:	David Svoboda	Aug 06, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/zTdGBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (2)     Page: ERR00-J. Do not suppress or ignore checked exceptions     Page: FIO12-J. Provide methods to read and write little-endian data

Parent Page     Page: Rule 13. Input Output (FIO)

• sensitive
• draft
• fio
• logging
• android
• rule
• android-implementation-detail-java
• cwe-209

Time	Editor
Aug 06, 2025 16:57	David Svoboda	View Changes
REM cost reform
May 18, 2021 07:58	Michal Rozenau	View Changes
Parasoft Jtest 2021.1
Feb 26, 2021 09:42	Michal Rozenau	View Changes
Parasoft Jtest 2020.2
Feb 12, 2018 22:02	Will Snavely	View Changes
Jan 05, 2017 14:54	Will Snavely

External Links (10)
    cwe.mitre.org/
    cwe.mitre.org/data/definitions/532.html
    cwe.mitre.org/data/definitions/542.html
    https://www.pcisecuritystandards.org/security_standards/ind…
    java.sun.com/javase/6/docs/technotes/guides/logging/overvie…
    cwe.mitre.org/data/definitions/533.html
    https://docs.oracle.com/javase/8/docs/api/java/util/logging…
    https://www.pcisecuritystandards.org/security_standards/pci…
    cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2990
    cwe.mitre.org/data/definitions/359.html

SEI CERT Oracle Coding Standard for Java (9)     Page: Rule BB. Glossary     Page: Rule AA. References     Page: FIO12-J. Provide methods to read and write little-endian data     Page: Parasoft_V     Home page: SEI CERT Oracle Coding Standard for Java     Page: Parasoft     Page: Rule 13. Input Output (FIO)     Page: ERR00-J. Do not suppress or ignore checked exceptions     Page: FIO14-J. Perform proper cleanup at program termination