A command shell error message indicates that there exists an unhandled exception in the web application code. In many cases, an attacker can leverage the conditions that cause these errors in order to gain unauthorized access to the system.
View on MITRENo mitigation information available for this CWE.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
CWE-535: Exposure of Information Through Shell Error Message is a Common Weakness Enumeration (CWE) entry maintained by MITRE. A command shell error message indicates that there exists an unhandled exception in the web application code. In many cases, an attacker can leverage the conditions that cause these errors in order to gain unauthorized access to the system.
If exploited, CWE-535 (Exposure of Information Through Shell Error Message) it can compromise Confidentiality, leading to outcomes such as Read Application Data.
A CWE (Common Weakness Enumeration) like CWE-535 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.