10023—Information Disclosure - Debug Error Messages

PUBLISHEDsecurity alertLow

Passive

Metadata

Alert ID:: 10023
Risk:: Low
Type:: Passive
CWE:: CWE-200Exposure of Sensitive Information to an Unauthorized Actor

Summary

The response appeared to contain common error messages returned by platforms such as ASP.NET, and Web-servers such as IIS and Apache. You can configure the list of common debug messages.

Solution

Disable debugging messages before pushing to production.

browse all alerts