Timestamp Disclosure - Unix
ID |
timestamp_disclosure_unix |
Severity |
low |
Kind |
Information Disclosure |
CWE |
497 |
Description
This detector identifies Unix epoch timestamps exposed in HTTP responses, including headers, body content, cookies, or URL parameters. Unix timestamps represent the number of seconds since January 1, 1970 and may reveal timing information about application operations.
Rationale
Disclosed timestamps can leak sensitive information about system operations, user activities, or backend processes. Attackers can use timestamp data to infer system architecture, identify temporal patterns in data creation or modification, correlate events across different parts of the application, or exploit race conditions. When aggregated, timestamps may reveal business intelligence, user behavior patterns, or information useful for timing attacks. While individual timestamps are low risk, systematic disclosure across many endpoints can provide reconnaissance value for advanced attacks.