Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

WebDAV Directory Has Write Permissions

Severity: High
Summary#

Invicti detected that WebDAV is enabled on this server and this directory has write permissions enabled. Invicti was able to create a test file within this directory using the PUT method. After the test, Invicti tried to delete the file.

Impact#
Malicious users may create or modify files in this directory without providing any type of authentication and they might;
  • Gain full access to the application server.
Remediation#
Restrict access for method PUT or if it's not being used, consider disabling it.
Classifications#
, , , , ,

Select Category

OR

Search Vulnerability

Related Vulnerabilities

Invicti

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo