Server-generated Error Message Containing Sensitive Information
CWE-550
Certain conditions, such as network failure, will cause a server error message to be displayed.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.2.
How this weakness is prevented
- Architecture and Design System Configuration: Recommendations include designing and adding consistent error handling mechanisms which are capable of handling any user input to your web application, providing meaningful detail to end-users, and preventing error messages that might provide information useful to an attacker from being displayed.
Latest Server-generated Error Message Containing Sensitive Information vulnerabilities
- 7.5 High severity
squid: Generation of Error Message Containing Sensitive Information
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the cr
- 8.8 High severity
QMS Automotive: Server-generated Error Message Containing Sensitive Information
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database.