Information Disclosure - Debug Error Messages via WebSocket

• Risk:

• Low

• Type:
• WebSocket Passive

• CWE:
• CWE-200

Summary

The response appeared to contain common error messages returned by platforms such as ASP.NET, and Web-servers such as IIS and Apache. You can configure the list of common debug messages.

Solution

Disable debugging messages before pushing to production.