10033—Directory Browsing

PUBLISHEDsecurity alertMedium

Passive

Metadata

Alert ID:: 10033
Risk:: Medium
Type:: Passive
CWE:: CWE-548Exposure of Information Through Directory Listing

摘要

It is possible to view a listing of the directory contents. Directory listings may reveal hidden scripts, include files, backup source files, etc., which can be accessed to reveal sensitive information.

解决方案

Configure the web server to disable directory browsing.

其他信息

Web server identified: Apache 2

参考

browse all alerts