Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

eZ Publish site.ini Configuration Disclosure

Medium

Synopsis

eZ Publish (a content management system) is installed on the remote host.

Description

eZ Publish (a content management system) is installed on the remote host. An attacker may retrieve the file 'settings/site.ini' and gather interesting information about the remote host.

Solution

Restrict remote access to .ini files.