Improper Scrubbing of Sensitive Data from Decommissioned Device
CWE-1266
Short description
The product does not properly provide a capability for the product administrator to remove sensitive data at the time the product is decommissioned. A scrubbing capability could be missing, insufficient, or incorrect.