Skip to content

The URL-path name must be set to the file path name or the directory path name.

An XCCDF Rule

Description

<VulnDiscussion>The ScriptAlias directive controls which directories the Apache server "sees" as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>Web Administrator</Responsibility><IAControls></IAControls>

ID
SV-33229r1_rule
Severity
Medium
Updated



Remediation - Manual Procedure

Edit the httpd.conf file and set the ScriptAlias URL-path and file-path or directory-path entries.