The OHS htdocs directory must not contain any default files.
An XCCDF Rule
Description
<VulnDiscussion>Default files from the OHS installation should not be part of the htdocs directory. These files are not always patched or supported and may become an attacker vector in the future.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-221439r879887_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
1. cd $DOMAIN_HOME/config/fmwconfig/components/OHS/instances/ohs1/htdocs
2. rm –rf OracleHTTPServer12c_files.