WG290 A22 - Web client access to the content directories must be restricted to read and execute - script alias

Information

Excessive permissions for the anonymous web user account are one of the most common faults contributing to the compromise of a web server. If this user is able to upload and execute files on the web server, the organization or owner of the server will no longer have control of the asset.

Solution

Assign the appropriate permissions to the applicable directories and files using the chmod command.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_UNIX_V1R11_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|I, CSCv6|3.1, Rule-ID|SV-33027r2_rule, STIG-ID|WG290_A22, Vuln-ID|V-2258

Plugin: Unix

Control ID: e7c18bde449bb7ad04257ac869b747f884b49b2313118e062fd2d2f57a8a1002