10095—Backup File Disclosure

PUBLISHEDsecurity alertMedium

Active

Metadata

Alert ID:: 10095
Risk:: Medium
Type:: Active
CWE:: CWE-530Exposure of Backup File to an Unauthorized Control Sphere

Summary

A backup of the file was disclosed by the web server

Solution

Do not edit files in-situ on the web server, and ensure that un-necessary files (including hidden files) are removed from the web server.

Other info

A backup of [https://example.com/profile.asp] is available at [https://example.com/profile.asp.old]

References

browse all alerts