I have a case where the IA error, Informatrion disclosure vulnerability has been caused by poor error handling. It seems that there is an exception bubbling up from the application that is not being handled and leaking out to the user. Does anyone know how
to trap the exception and figure out it's type? Also, once the execption has been determined and caught what is the best practice for handling it? This may be more of a coders question but any help would be great! Note: we are using Web Inspect with HP Fortify
logs.
Thanks,
Steve Holdorf
Go to the complete details ...