An information disclosure vulnerability was reported in a sample script provided with Red Hat's Stronghold web server. A remote user can determine the web root directory path. A remote user can send a request to the Stronghold sample script swish to cause the script to reveal the full path to the webroot directory. Apparently, swish may also display system-specific information in the HTML returned by the script

remove it