Description

The ASP.NET application trace is enabled. This file contains sensitive information such as Session ID values and physical path to the requested file.

Remediation

Remove this file from your website or change its permissions to remove access.

References

How to: Enable Tracing for an ASP.NET Application

Related Vulnerabilities

Yii debug mode enabled

PHP allow_url_fopen Is Enabled

WordPress Plugin HTML5 MP3 Player with Playlist Free Information Disclosure (2.6)

Apache Tomcat version older than 7.0.32

Spring Boot Misconfiguration: Datasource credentials stored in the properties file

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure CWE-215