ASP.NET application trace enabled
ASP.NET application trace enabled
Published on 2004-03-27. Updated on 2009-01-23.
Description:
The ASP.NET application trace is enabled. This file contains sensitive information such as Session ID values and physical path to the requested file.
Impact:
This file may expose sensitive information that may help an malicious user to prepare more advanced attacks.
Recommendation:
Remove this file from your website or change its permissions to remove access.
Alert Tags: information_disclosure
ApplicableApplicationServer : ASP.NET
ApplicableOS: Windows
ApplicableWebServer: IIS
References:
Go Back