ID de Prueba:	1.3.6.1.4.1.25623.1.0.10678
Categoría:	Web application abuses
Título:	Apache HTTP Server /server-info Accessible (HTTP)
Resumen:	Requesting the URI /server-info provides a comprehensive; overview of the server configuration.
Descripción:	Summary: Requesting the URI /server-info provides a comprehensive overview of the server configuration. Vulnerability Insight: server-info is a Apache HTTP Server handler provided by the 'mod_info' module and used to retrieve the server's configuration. Vulnerability Impact: Requesting the URI /server-info gives throughout information about the currently running Apache to an attacker. Affected Software/OS: All Apache installations with an enabled 'mod_info' module. Solution: - If this feature is unused commenting out the appropriate section in the web servers configuration is recommended. - If this feature is used restricting access to trusted clients is recommended. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2005 StrongHoldNet / 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.