Skip to content

Web content directories must not be anonymously shared.

An XCCDF Rule

Description

Sharing of web server content is a security risk when a web server is involved. Users accessing the share anonymously could experience privileged access to the content of such directories. Network sharable directories expose those directories and their contents to unnecessary access. Any unnecessary exposure increases the risk that someone could exploit that access and either compromises the web content or cause web server performance problems.

Property Value
Responsibility System Administrator

ID
SV-33109r2_rule
Version
WG210 W22
Severity
Medium
Updated

Remediation Templates

A Manual Procedure

Remove the shares from the applicable directories.