ID de Prueba:	1.3.6.1.4.1.25623.1.0.111109
Categoría:	Web Servers
Título:	Apache HTTP Server 'mod_negotiation' MultiViews Information Disclosure Vulnerability
Resumen:	Apache HTTP Server is prone to an information disclosure vulnerability.
Descripción:	Summary: Apache HTTP Server is prone to an information disclosure vulnerability. Vulnerability Insight: By requesting an invalid 'application/vttest q=1.0' Accept: header the webserver is replying with a list of alternative files which exists in the webservers directory. See the reference for more background information. Vulnerability Impact: Based on the information provided an attacker might be able to bruteforce existing files (like backup files) which exists in the webservers directory. Solution: Disable the MultiViews directive within the webservers configuration or don't place files within the webservers directory which shouldn't be accessible/guessable by an attacker. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2016 SCHUTZWERK GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.