CWE-756 - Missing Custom Error Page

CWE ID:

CWE-756

Abstraction:Base
Structure:Simple
Status:Incomplete

Release Date:2009-03-10
Latest Modification Date:2023-06-29

Weakness Name

Missing Custom Error Page

Description

The product does not return custom error pages to the user, possibly exposing sensitive information.

Common Consequences

Scope: Confidentiality

Impact: Read Application Data

Notes: Attackers can leverage the additional information provided by a default error page to mount attacks targeted on the framework, database, or other resources used by the application.

Related Weaknesses

CWE-209Generation of Error Message Containing Sensitive InformationHigh

CWE-755Improper Handling of Exceptional ConditionsMedium

Latest Security News

Latest CVE List

Top Alert List

CSP
Content Security Policy (CSP) Header Not Set
MediumAbsence of Anti-CSRF Tokens
MediumMissing Anti-clickjacking Header
InformationalInformation Disclosure - Suspicious Comments
LowCross-Domain JavaScript Source File Inclusion
MediumContent Security Policy (CSP) Header Not Set
LowTimestamp Disclosure - Unix
LowCSP: X-Content-Security-Policy
InformationalRe-examine Cache-control Directives