CWE-536: Servlet Runtime Error Message Containing Sensitive Information
Description
A servlet error message indicates that there exists an unhandled exception in your web application code and may provide useful information to an attacker.
Submission Date :
July 19, 2006, midnight
Modification Date :
2023-06-29 00:00:00+00:00
Organization :
MITRE
Example Vulnerable Codes
Example - 1
The following servlet code does not catch runtime exceptions, meaning that if such an exception were to occur, the container may display potentially dangerous information (such as a full stack trace).
// // May cause unchecked NullPointerException.//
...String username = request.getParameter("username");if (username.length() < 10) {}public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {}Related Weaknesses
This table shows the weaknesses and high level categories that are related to this weakness. These relationships are defined to give an overview of the different insight to similar items that may exist at higher and lower levels of abstraction.
Visit http://cwe.mitre.org/ for more details.