ASP.NET CustomErrors Is Disabled
Description
Application error or warning messages may expose sensitive information about an application's internal workings to an attacker.
Invicti found an error message that may disclose sensitive information. By requesting a specially crafted URL, Invicti generated an ASP.NET error message. The message contains a complete stack trace and Microsoft .NET Framework version.
Remediation
Adjust the application's <code>web.config</code> to enable custom errors for remote clients (refer to 'Detailed information' section).