What would be an A6- Information Leakage and Improper Error Handling failure?
Several applications may, unintentionally, leak information about their configurations, internal functioning or violate privacy through several problems. Applications can leak their internal functioning via response time to execute specific process or different responses for diverse entries, like displaying same error message but with different error codes. Web Applications will frequently leak information about their internal functioning through detailed error messages or debug. Frequently, these information items can be the path to launch attacks or even more powerful tools. Conclusions: -Access to agents cannot be regarded as a failure since robots.txt are globally used so that information cannot be indexed in the searchs as google, yahoo but, when dealing with applications, it would be a best practice to place an access password in the directory /agents/. – A stack error or inadequate error handling does not mean that the site has some SQL Injection vulnerability in the application
