Home / Vulnerability Database / Scala : External information leak
Scala

Scala : External information leak

Overview

System configuration information leak is possible. This can help an attacker to plan an attack.

Debug information and error messages can be written to the log, displayed to the console, or sent to the user depending on the system settings. In some cases, an attacker can make a conclusion about the system vulnerabilities from the error message. For example, a database error can indicate insecurity against SQL injection attacks. Information about the version of the operating system, application server and system configuration can also be of value to the attacker.

In this case, we are talking about the external leak: information about the system is transferred to another machine over the network. External leaks are more dangerous than internal ones.

This applies both to web applications and mobile applications.

MEDIUM

DerScanner Severity Score

Do you want to fix Scala : External information leak in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length