The web client account access to the content and scripts directories must be limited to read and execute.
An XCCDF Rule
Description
<VulnDiscussion>Excessive permissions for the anonymous web user account are one of the most common faults contributing to the compromise of a web server. If this user is able to upload and execute files on the web server, the organization or owner of the server will no longer have control of the asset.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>System Administrator</Responsibility><IAControls></IAControls>
- ID
- SV-33136r1_rule
- Severity
- High
- Updated
Remediation - Manual Procedure
Assign the appropriate permissions to the applicable directories and files.