Description

This web application is configured with the serviceDebug property includeExceptionDetailInFaults set to true. When configured this way, the WCF service will disclose exception details to clients.

Remediation

It's recommended to disable showing exception details to clients by setting the serviceDebug property includeExceptionDetailInFaults set to false.

<serviceDebug includeExceptionDetailInFaults="false" />

References

Related Vulnerabilities