You must Sign In to post a response.
  • Category: ASP.NET

    ASP.NET Web application was configured to return informative error messages

    Hi
    I Have a Security Issue on my Web Application.
    My ASP.NET Web application was configured to return informative error messages. This could enable an attacker to understand the cause of the errors and use this information to develop further attack strategies.

    Below are the Technologies Using:
    C#.Net, ASP.Net, SQL Server 2008 R2, Java Script.

    Please assist me.
    Thanks.
  • #769267
    What kind of informative message you are showing, if you are worried about the detailed error message why can't you change the error display. You can log the detailed error in a log file and display generic error in your front page.

    Please provide more details about the requirement so that we suggest more appropriate solution.


    Regards,
    Asheej T K

  • #769271
    Hi
    Thanks for the response,

    The error reveals to a user the absolute file path to the webroot and the operating system of the server


Sign In to post your comments