CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists thatcould cause exposure of credentials when attacker has access to application on network overhttp