[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248038

 
 

909

 
 

194772

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-92214-6

Platform: Amazon LinuxDate: (C)2018-10-29   (M)2022-10-10



Disable Web Server Configuration Display The 'info' module creates a web page illustrating the configuration of the web server. This can create an unnecessary security leak and should be disabled. If its functionality is unnecessary, comment out the module: '#LoadModule info_module modules/mod_info.so' If there is a critical need for this module, use the 'Location' directive to provide an access control list to restrict access to the information.


Parameter:


Technical Mechanism:

Minimizing the number of loadable modules available to the web server reduces risk by limiting the capabilities allowed by the web server. Fix: No Remediation Info

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:48401
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:48835
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:48401


OVAL    2
oval:org.secpod.oval:def:48401
oval:org.secpod.oval:def:48835

© SecPod Technologies