Skip to main content

Leaking authentication

Description

The server sent too much information in the response about the user's base.

Remediation

Ensure that messages are neutral and do not disclose information about the user's base.

Configuration

Identifier: information_disclosure/leaking_authentication

Examples

Ignore this check

{
"checks": {
"information_disclosure/leaking_authentication": {
"skip": true
}
}
}

Score

  • Escape Severity: MEDIUM

CVSS

  • CVSS_VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C
  • CVSS_SCORE: 7.2