WA00560 W22 - The URL-path name must be set to the file path name or the directory path name.

Information

The ScriptAlias directive controls which directories the Apache server 'sees' as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.

Solution

Modify the ScriptAlias directive so the URL-path and file-path/directory-path entries match.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_WIN_V1R13_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, Rule-ID|SV-33185r1_rule, STIG-ID|WA00560_W22, Vuln-ID|V-26327

Plugin: Windows

Control ID: 549b62582ddc029ef5b3af7e1cd8039d251f38b91f21280ad876f3b78a641cef