CWE-550: Information Exposure Through Server Error Message
Information Exposure Through Server Error Message
Weakness ID: 550 (Weakness Variant)
Status: Incomplete
Description
Description Summary
Certain conditions, such as network failure, will cause a server error message to be displayed.
Extended Description
While error messages in and of themselves are not dangerous, per se, it is what an attacker can glean from them that might cause eventual problems.
Time of Introduction
Implementation
Common Consequences
Scope
Effect
Confidentiality
Technical Impact: Read application
data
Potential Mitigations
Recommendations include designing and adding consistent error handling
mechanisms which are capable of handling any user input to your web
application, providing meaningful detail to end-users, and preventing
error messages that might provide information useful to an attacker from
being displayed.
Description
