ASP .NET Misconfiguration: Missing Custom Error
Handling. An ASP .NET application must enable custom
error pages in order to prevent attackers from mining
information from the framework’s built-in responses.