Nonexistent Page (404) Physical Path Disclosure
Medium Nessus Plugin ID 11714
SynopsisThe remote web server is affected by an information disclosure vulnerability.
DescriptionThe remote web server reveals the physical path of the webroot when a nonexistent page is requested.
While printing errors to the output is useful for debugging applications, this feature should be disabled on production servers.
SolutionUpgrade the web server to the latest version. Alternatively, reconfigure the web server to disable debug reporting.