"The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors." - Entry from the Common Weakness Enumeration
For more info visit CWE-212