WA00560 W22 - The URL-path name must be set to the file path name or the directory path name.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The ScriptAlias directive controls which directories the Apache server 'sees' as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.

Solution

Modify the ScriptAlias directive so the URL-path and file-path/directory-path entries match.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_WIN_V1R12_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, Rule-ID|SV-33185r1_rule, STIG-ID|WA00560, Vuln-ID|V-26327

Plugin: Windows

Control ID: 549b62582ddc029ef5b3af7e1cd8039d251f38b91f21280ad876f3b78a641cef