ID de Prueba:	1.3.6.1.4.1.25623.1.0.10677
Categoría:	Web application abuses
Título:	Apache HTTP Server /server-status Accessible (HTTP)
Resumen:	Requesting the URI /server-status provides information on the; server activity and performance.
Descripción:	Summary: Requesting the URI /server-status provides information on the server activity and performance. Vulnerability Insight: server-status is a Apache HTTP Server handler provided by the 'mod_status' module and used to retrieve the server's activity and performance. Vulnerability Impact: Requesting the URI /server-status gives throughout information about the currently running Apache to an attacker. Affected Software/OS: - All Apache installations with an enabled 'mod_status' module - FreedomBox through 20.13 Solution: - If this feature is unused commenting out the appropriate section in the web servers configuration is recommended - If this feature is used restricting access to trusted clients is recommended - If the FreedomBox software is running on the target update the software to a later version CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-25073 https://salsa.debian.org/freedombox-team/freedombox/-/issues/1935
Copyright	Copyright (C) 2005 StrongHoldNet / 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.