Directory Listing (Lighttpd)
Severity: Information
Summary #
Netsparker identified a Directory Listing (lighttpd).
The web server responded with a list of files located in the target directory.
Impact #
An attacker can see the files located in the directory and could potentially access files which disclose sensitive information.
Actions To Take #
- Change your
lighttpd.conffile. A secure configuration for the requested directory should be similar to the following:dir-listing.activate = "disable"
- Configure the web server to disallow directory listing requests.
- Ensure that the latest security patches have been applied to the web server and the current stable version of the software is in use.
Classifications #
CAPEC-127, CWE-548, ISO27001-A.9.4.1, WASC-16, OWASP PC-C6, OWASP 2013-A5, OWASP 2017-A6
, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
