CWE-11

ASP.NET Misconfiguration: Creating Debug Binary

Medium

Description

Debugging messages help attackers learn about the system and plan a form of attack.

Potential Impact

Confidentiality: Read Application Data

How to Fix

System Configuration

Avoid releasing debug binaries into the production environment. Change the debug mode to false when the application is deployed into production.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-11 vulnerabilities in your codebase.

Get Security Assessment