The URL-path name must be set to the file path name or the directory path name.
An XCCDF Rule
Description
<VulnDiscussion>The ScriptAlias directive controls which directories the Apache server "sees" as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>Web Administrator</Responsibility><IAControls></IAControls>
- ID
- SV-33229r1_rule
- Severity
- Medium
- Updated
Remediation - Manual Procedure
Edit the httpd.conf file and set the ScriptAlias URL-path and file-path or directory-path entries.