ASP.NET debugging enabled

ASP.NET debugging enabled

Published on 2007-02-19. Updated on 2007-03-20.

Description:
ASP.NET debugging is enabled on this application. It is recommended to disable debug mode before deploying a production application. By default, debugging is disabled, and although debugging is frequently enabled to troubleshoot a problem, it is also frequently not disabled again after the problem is resolved.

Impact:
It may be possible to disclose sensitive information about the web sever the ASP.NET application.

Recommendation:
Check References for details on how to fix this problem.

Tags: Scripts

Alert Tags: information_disclosure
ApplicableApplicationServer : ASP.NET
ApplicableOS: Windows
ApplicableWebServer: IIS

References:

  • HOW TO: Disable Debugging for ASP.NET Applications

  • Go Back