CWE-550—Server-generated Error Message Containing Sensitive Information

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-550
摘要：
Variant
结构：
Simple
状态：
Incomplete
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Server-generated Error Message Containing Sensitive Information

描述

Certain conditions, such as network failure, will cause a server error message to be displayed.

While error messages in and of themselves are not dangerous, per se, it is what an attacker can glean from them that might cause eventual problems.

常见后果

范围：
Confidentiality
影响：
Read Application Data

相关 CWE

browse all CWEs
相关工具:检查可疑链接 →运行更深入的网站漏洞扫描 →