Apache Multiple Choices Enabled
Severity: Low
Summary
Netsparker detected that Apache Multiple Choices is enabled.
This vulnerability can be used for locating and obtaining access to some hidden resources.
Impact
An attacker can use this functionality to aid in finding hidden files in the site and potentially gather further sensitive information.
Actions To Take
Change your server configuration file to disable spelling module. A recommended configuration for the requested directory should be in the following format:
<Directory /{YOUR DIRECTORY}> CheckSpelling Off </Directory>
Classifications
CWE-16, ISO27001-A.9.4.1, WASC-14, OWASP 2013-A5, OWASP 2017-A6
Netsparker Security Insights
Helpful Use Cases
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
