CWE-537

Java Runtime Error Message Containing Sensitive Information

Medium

Description

In many cases, an attacker can leverage the conditions that cause unhandled exception errors in order to gain unauthorized access to the system.

Potential Impact

How to Fix

Implementation

Do not expose sensitive error information to the user.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-537 vulnerabilities in your codebase.

Get Security Assessment