.DS_Store File Detected

Medium Web Application Scanning Plugin ID 98646


.DS_Store File Detected


The web server on the remote host allows read access to a OSX .DS_Store file. This potential flaw can be used to access content from the web server that might otherwise be private.


Remove the .DS_Store file.

Plugin Details

Severity: Medium

ID: 98646

Type: remote

Published: 2019/07/30

Updated: 2019/07/30

Scan Template: api, scan, pci

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS v3.0

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Reference Information