Turn off verbose SQL error messages for import processor
Configure this property to control whether verbose SQL error messages are displayed.
If the glide.import.error_message.generic system property is set to false a verbose SQL error message is returned, potentially causing sensitive information disclosure.
Ensure that the glide.import.error_message.generic is set to true to display a generic error message.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.import.error_message.generic |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | Error handling and logging |
| Security risk | - Severity score: 3.1 - CVSS score: Low - Security risk details: If verbose SQL error messages are returned, sensitive information such as database structure, table names, or query details may be exposed. This information can be leveraged by attackers to craft targeted SQL injection attacks or exploit other vulnerabilities, increasing the risk of data breaches and system compromise. Limiting error detail is essential to prevent information disclosure that aids malicious activity. |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Error handling and logging