Veracode Base Camp — GSengodan192690 (Community Member) shared a post.
GSengodan192690 (Community Member) asked a question.
Hello Community,
We have a .NET application in which The application is not using System.IO.TextWrite.WriteLine() anywhere But while doing Veracode static scan the report says "The application calls the mscorlib_dll.System.IO.TextWrite.WriteLine() function, Which may expose information about the application logic or Other details such as names and versions of the application container and associated components. "
This is the assembly name Antlr3.runtime.dll where Veracode reported the flaw.
Below is the Flaw details:
CWE Code : 209 Generation of error message containing sensitive information
Please advise on the above issue.
Thank you,
Gunasekaran
.png){kind=logo}
