Vulnerability where an application inadvertently expose confidential information to unauthorised parties. Examples Login credentials in comments of HTML source code.