Description

Apache /stronghold-info displays information about your Apache configuration. This URL is enabled when you are using Apache Stronghold. If you are not using this feature, disable it.

Remediation

Disable this functionality if not required.

References

Apache Homepage

Related Vulnerabilities

WordPress Plugin WP-DBManager 'wp-config.php' Arbitrary File Download (2.60)

Spring Misconfiguration: HTML Escaping disabled

No Script Block Detected with the Hash Value Declared in Content Security Policy (CSP)

Webmail weak password

SAP NetWeaver server info information disclosure BCB

Severity

Low

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure