V-204775
Application Server Security Requirements Guide
Title
The application server must restrict error messages only to authorized users.
Description
<VulnDiscussion>If the application provides too much information in error logs and administrative messages to the screen, this could lead to compromise. The structure and content of error messages need to be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements. Application servers must protect the error messages that are created by ...
Fix Text (Documentation Requirement)
Configure the application server to restrict access to error messages so only authorized users may view or otherwise access them.