USNS MONTFORD POINT - Findings

Showing 1 unique vulnerabilities (1 total) (filtered) View Documentation Status (90 tracked)

V-206578 CAT II The DBMS must provide non-privileged users with error messag...

1 asset 1 Closed Database Security Re...

Hostname	IP Address	Status	Assigned To	Last Scan	Actions
MONT-DB-002	-			2026-03-06
Finding Details No details recorded. Comments Non-privileged users do not have direct access to the DBMS where database error messages are displayed. The application displays errors messages that only provide information for corrective action. The DBMS is not accessible by direct remote connection or URL.

Check Text

Check DBMS settings and custom database code to verify that error messages do not contain information beyond what is needed for troubleshooting the issue. If database errors contain PII data, sensitive business data, or information useful for identifying the host system or database structure, this is a finding.

Fix Text

Configure DBMS settings, custom database code, and associated application code not to divulge sensitive information or information useful for system identification in error messages.

Finding Details

Comments

Check Text

Fix Text