+APP.3.2.A12 Suitable Handling of Errors and Error Messages (S)

APP.3.2.A12 Suitable Handling of Errors and Error Messages (S)

HTTP information and displayed error messages SHOULD not show the product name or the version of the web server used. Error messages SHOULD not reveal details regarding system information or configurations. The IT Operation Department SHOULD ensure that the web server only outputs general error messages that inform the user that an error has occurred. Each error message SHOULD contain a unique characteristic that allows administrators to trace the error. In the case of unexpected errors, it SHOULD be ensured that the web server will not remain in a state where it is vulnerable to attack.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems