名稱: Missing Custom Error Page
The product does not return custom error pages to the user, possibly exposing sensitive information.
一般資訊
引入方式
InstallationSystem Configuration
Operation
適用平台
程式語言
類別： Not Language-Specific (Undetermined)技術
名稱： Web Server (Sometimes)常見後果
| 範圍 | 影響 | 可能性 |
|---|---|---|
| Confidentiality | Read Application Data 注意：Attackers can leverage the additional information provided by a default error page to mount attacks targeted on the framework, database, or other resources used by the application. |
觀察到的案例
| 參考資料 | 描述 |
|---|---|
CVE-2023-27998 | analytics platform does not have a custom error page, allowing access to sensitive information |
漏洞對應備注
理由說明 : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.備註 : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.
提交
| 名稱 | 機構 | 日期 | 發布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 1.3 |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated Common_Consequences | |
| CWE Content Team | MITRE | updated Common_Consequences, Demonstrative_Examples, Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships, Type | |
| CWE Content Team | MITRE | updated Demonstrative_Examples | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Relationships, Time_of_Introduction, Weakness_Ordinalities | |
| CWE Content Team | MITRE | updated Observed_Examples |
