Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Disable Stacktrace information

Thomas Suter August 25, 2016

Hi

We've got a security audit on our confluence installation and we are told that we have to disable the stacktrace information on the error pages.

I cannot find any information about that, is there a possibilitiy?

 

BR

Thomas

2 answers

0 votes
Thomas Suter August 28, 2016

Thanks for answer.

Unfortunately I didn't find any solution for this issue in the OWASP documents or in the Tomcat documentation directly.

Does anyone have another idea?

cheers

Thomas

Florian Seifer June 12, 2020

I am having the problem right now, trying to secure a Confluence-Installation after a Penetration Test.  Did you by any Chance find a solution to disable Stack Traces?

0 votes
Jonas Andersson
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 25, 2016

Confluence and JIRA are both run on tomcat. Looking around i could not find anything about this on Atlassian pages, but apache tomcat does have a few pages about it. Check out this: https://www.owasp.org/index.php/Securing_tomcat

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events