The software does not return custom error pages to the user, possibly exposing sensitive information.