110003—Information Disclosure - Debug Error Messages via WebSocket

PUBLISHEDsecurity alertLow

WebSocket Passive

Metadata

Alert ID:: 110003
Risk:: Low
Type:: WebSocket Passive
CWE:: CWE-200Exposure of Sensitive Information to an Unauthorized Actor

摘要

The response appeared to contain common error messages returned by platforms such as ASP.NET, and Web-servers such as IIS and Apache. You can configure the list of common debug messages.

解决方案

Disable debugging messages before pushing to production.

browse all alerts