Directory Listing (Lighttpd)
Severity: Information
Summary
Netsparker identified a directory listing (lighttpd).
The web server responded with a list of files located in the target directory.
Impact
An attacker can see the files located in the directory and could potentially access files which disclose sensitive information.
Actions To Take
- Change your
lighttpd.conffile. A secure configuration for the requested directory should be similar to the following:dir-listing.activate = "disable"
- Configure the web server to disallow directory listing requests.
- Ensure that the latest security patches have been applied to the web server and the current stable version of the software is in use.
Classifications
CAPEC-127, WASC-16, OWASP PC-C6, OWASP 2013-A5
, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
