WEB_IIS global.asa access

 

Code: p1154

Severity: Warning

 

Description: This event is generated when an attempt is made to craft a URL containing a reference to the "/global.asa" file.

Impact: Intelligence gathering. This attack may permit disclosure of the source code of global.asa file that is not normally available for viewing.

Corrective: Apply the patch referenced in the Microsoft link.