Home >> Taxonomy >> Asvs 4.0.3 >> 14 configuration >> 03 unintended security disclosure

Unintended Security Disclosure

V14.3.1

[DELETED, DUPLICATE OF 7.4.1]

Level 1 required: False

Level 2 required: False

Level 3 required: False

CWE:

V14.3.2

Verify that web or application server and application framework debug modes are disabled in production to eliminate debug features, developer consoles, and unintended security disclosures.

Level 1 required: True

Level 2 required: True

Level 3 required: True

CWE: 497

V14.3.3

Verify that the HTTP headers or any part of the HTTP response do not expose detailed version information of system components.

Level 1 required: True

Level 2 required: True

Level 3 required: True

CWE: 200

Disclaimer:

Credit via OWASP ASVS. For more information visit The OWASP ASVS Project or Github respository.. OWASP ASVS is under the Creative Commons Attribution-Share Alike v3.0 license.

View source on GitHub

Loading comments 0%