Apache Server-Status Detected
Severity:
Medium
Summary
Invicti detected that Apache server-status is enabled.
Information disclosed from this page can be used to gain additional information about the target system.
Impact
An attacker can gather reconnaissance information about the internals of the target web server, such as:
- Server uptime
- Individual request-response statistics and CPU usage of the working processes
- Current HTTP requests, client IP addresses, requested paths, and processed virtual hosts
Remediation
We recommend disabling this functionality. Comment out the Location/server-info section from Apache configuration file httpd.conf (for Redhat, Centos, Fedora) or apache2.conf (for Debian, Ubuntu).
Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
