ASP.NET Debugging Enabled

Severity: Information

Summary#

Invicti detected that ASP.NET debugging is enabled.

Impact#

This indicates that the debugging flag was left enabled in the production system. There is no direct impact of this issue, and it is presented here only for information.

Actions To Take#

Apply the following changes in your web.config file to disable ASP.NET debugging.

<System.Web>
     <compilation debug="false" />
</System.Web>

Classifications#

OWASP 2017-A6, WASC-14, OWASP 2013-A5, CWE-16, ISO27001-A.9.4.1

Select Category

Critical
High
Medium
Low
Best Practice
Information

Search Vulnerability

ASP.NET Debugging Enabled

Related Articles

Build your resistance to threats. And save hundreds of hours each month.