Attackers can sniff or modify the sensitive data if not handled securely by the application.
Unfortunately applications can unintentionally leak important information about their configuration
internal workings or private data.
Attackers will use this weakness to steal sensitive information and conduct serious attacks.
A few examples include the use of weak encryption keys as seen here on the screen a victim and a web
server communicate over a channel and where the victim sends encoded data which is base 64 data to the
server and any attacker sniffing.
The session will be able to capture this data and easily converted to a readable format so we could
crypto algorithms which are used over HDTV channels even HDTV s channels are susceptible to attacks
and give out our sensitive data.
Another example is to impersonate the session I.D. as well an attacker sniffing the channel will be
able to acquire the session idea and use it to impersonate the victim and present himself as the victim
to the server.
Some of the counter measures are to prevent displaying internal error messages to the end users such
as stack traces database names table names or even protocols used encrypt all data and transmit and
data addressed use secure protocols and algorithms and this able caching of responses with sensitive
data.