Category: ASP.NET

03 Jul 2017 02:37

Joined:	02/07/2017
Level:	Bronze
Points:	18

Points:	3

ASP.NET Web application was configured to return informative error messages

Hi
I Have a Security Issue on my Web Application.
My ASP.NET Web application was configured to return informative error messages. This could enable an attacker to understand the cause of the errors and use this information to develop further attack strategies.

Below are the Technologies Using:
C#.Net, ASP.Net, SQL Server 2008 R2, Java Script.

Please assist me.
Thanks.

#769267

03 Jul 2017 21:31

Joined:	12/11/2009
Level:	Gold
Points:	43848

Points:	3

What kind of informative message you are showing, if you are worried about the detailed error message why can't you change the error display. You can log the detailed error in a log file and display generic error in your front page.

Please provide more details about the requirement so that we suggest more appropriate solution.

Regards,
Asheej T K

#769271

04 Jul 2017 00:50

Joined:	02/07/2017
Level:	Bronze
Points:	18

Points:	1

Hi
Thanks for the response,

The error reveals to a user the absolute file path to the webroot and the operating system of the server

ASP.NET Web application was configured to return informative error messages

About dotnetspider.com

Quick Links

General

Services