Timestamp Disclosure - Unix

ID

timestamp_disclosure_unix

Severity

low

Kind

Information Disclosure

CWE

497

Description

This detector identifies Unix epoch timestamps exposed in HTTP responses, including headers, body content, cookies, or URL parameters. Unix timestamps represent the number of seconds since January 1, 1970 and may reveal timing information about application operations.

Rationale

Disclosed timestamps can leak sensitive information about system operations, user activities, or backend processes. Attackers can use timestamp data to infer system architecture, identify temporal patterns in data creation or modification, correlate events across different parts of the application, or exploit race conditions. When aggregated, timestamps may reveal business intelligence, user behavior patterns, or information useful for timing attacks. While individual timestamps are low risk, systematic disclosure across many endpoints can provide reconnaissance value for advanced attacks.

Remediation

Manually confirm that the timestamp data is not sensitive, and that the data cannot be aggregated to disclose exploitable patterns.