Description

FrontPage Extensions are enabled on this server.

Remediation

If you are not using this functionality is recommended to run IISLockDown in order to disable FrontPage extensions.

References

IIS Lockdown Tool

Related Vulnerabilities

Insecure Referrer Policy

Unsupported Hash Detected in Content Security Policy (CSP)

WordPress Plugin Duplicator-WordPress Migration Arbitrary File Disclosure (0.3.0)

Oracle E-Business Suite Frame Injection (CVE-2017-3528)

Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive

Severity

Low

Classification

CWE-16 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure