Detections
Analytics
WA00560 W22 - The URL-path name must be set to the file path name or the directory path name.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
The ScriptAlias directive controls which directories the Apache server 'sees' as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.Solution
Modify the ScriptAlias directive so the URL-path and file-path/directory-path entries match.See Also
https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_WIN_V1R12_STIG.zip
Item Details
Audit Name: DISA STIG Apache Server 2.2 Windows v1r12
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6, CAT|II, Rule-ID|SV-33185r1_rule, STIG-ID|WA00560, Vuln-ID|V-26327
Plugin: Windows
Control ID: 549b62582ddc029ef5b3af7e1cd8039d251f38b91f21280ad876f3b78a641cef