The URL-path name must be set to the file path name or the directory path name.
An XCCDF Rule
Description
<VulnDiscussion>The ScriptAlias directive controls which directories the Apache server "sees" as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>Web Administrator</Responsibility><IAControls></IAControls>
- ID
- SV-33185r1_rule
- Severity
- Medium
- Updated
Remediation - Manual Procedure
Modify the ScriptAlias directive so the URL-path and file-path/directory-path entries match.