When an application fails to appropriately protect sensitive data that could end up being released to persons who are not meant to have access to it, it results in sensitive information disclosure (also known as sensitive data exposure).