CWE-1258
Exposure of Sensitive System Information Due to Uncleared Debug Information
The hardware does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations, when debug mode is entered.
Impactr finds and proves whether CWE-1258 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.