CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
A web server displays detailed error messages including stack traces, file paths, and database queries to end users. What security issue is this?
- A.A. XSS
- B.D. Broken authentication
- C.C. SQL injection
- D.B. Security misconfiguration - information disclosure through verbose error messages
Why D is correct
Detailed error messages leak information that helps attackers: technology stack, file paths, database structure, and code logic. Production systems should display generic error messages to users while logging detailed errors server-side for debugging. This is a security misconfiguration listed in the OWASP Top 10.
Know someone studying for Security Fundamentals? Send them this one.