10033—Directory Browsing

PUBLISHEDsecurity alertMedium

Passive

Metadata

Alert ID:: 10033
Risk:: Medium
Type:: Passive
CWE:: CWE-548Exposure of Information Through Directory Listing

Summary

It is possible to view a listing of the directory contents. Directory listings may reveal hidden scripts, include files, backup source files, etc., which can be accessed to reveal sensitive information.

Solution

Configure the web server to disable directory browsing.

Other info

Web server identified: Apache 2

References

browse all alerts