CWE-536 — Servlet Runtime Error Message Containing Sensitive Information
CWE-536: Servlet Runtime Error Message Containing Sensitive Information
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
A servlet error message indicates that there exists an unhandled exception in the web application code and may provide useful information to an attacker.
Common consequences
- Confidentiality: Read Application Data
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/536.html
- CWE list: https://cwe.mitre.org/data/index.html