40029—Trace.axd Information Leak

PUBLISHEDsecurity alertMedium

Active

Metadata

Alert ID:: 40029
Risk:: Medium
Type:: Active
CWE:: CWE-215Insertion of Sensitive Information Into Debugging Code

摘要

The ASP.NET Trace Viewer (trace.axd) was found to be available. This component can leak a significant amount of valuable information.

解决方案

Consider whether or not Trace Viewer is actually required in production, if it isn't then disable it. If it is then ensure access to it requires authentication and authorization.

参考

browse all alerts