RealServer /admin/Docs/default.cfg Information Disclosure

medium Nessus Plugin ID 12251

Language:

Synopsis

The remote server is affected by an information disclosure.

Description

The remote RealServer seems to allow any anonymous user to download the default.cfg file. This file is used to store confidential data and should not be accessible via the web frontend.

Solution

Remove or protect this resource.

Plugin Details

Severity: Medium

ID: 12251

File Name: realserver_defaultcfg.nasl

Version: 1.10

Type: remote

Family: CGI abuses

Published: 5/26/2004

Updated: 4/11/2022

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:realnetworks:realserver

Excluded KB Items: Settings/disable_cgi_scanning

Detections

Analytics