CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
A web server displays detailed error messages including stack traces, file paths, and database queries to end users. What security issue is this?
- A.SQL injection; file upload risks disappear once the extension is checked in JavaScript
- B.Security misconfiguration - information disclosure through verbose error messages
- C.Broken authentication, because security headers take effect only when the site runs on port 8080
- D.XSS
Why B is correct
Detailed error messages leak information that helps attackers: technology stack, file paths, database structure, and code logic. Production systems should display generic error messages to users while logging detailed errors server-side for debugging. This is a security misconfiguration listed in the OWASP Top 10.
Know someone studying for Security Fundamentals? Send them this one.