Microsoft IIS Log File Detected

Summary#

Invicti identified a Microsoft IIS log file with potentially sensitive content.

Impact#

Depending on the content of the file, an attacker might discover hidden directories and files.

Remediation#

Configure your web server to prevent public access to the directory / page by implementing access control mechanisms.

Classifications#