COMMON WEAKNESS ENUMERATIONIncomplete

CWE-756

Missing Custom Error Page

The product does not return custom error pages to the user, possibly exposing sensitive information.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product does not return custom error pages to the user, possibly exposing sensitive information.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Installation

Yaşam döngüsü evresi

System Configuration

Yaşam döngüsü evresi

Operation

Risk

Başarılı sömürü neye yol açar?

Read Application Data

Etkilenen güvenlik alanları: Confidentiality

Attackers can leverage the additional information provided by a default error page to mount attacks targeted on the framework, database, or other resources used by the application.

Savunma

Nasıl önlenir ve çözülür?

  • Follow secure coding guidelines for input handling and boundary checking.
  • Enforce strict security reviews and automated static analysis (SAST) checks.