WEB_IIS site server config access

 

Code: p1168

Severity: Warning

 

Description: This event is generated when an attempt is made to access the Microsoft Site Server site configuration file.

Impact: Intelligence gathering. This attack may permit the viewing of the site configuration file, which may contain sensitive information such as the username and password used by the Ad Server to access SQL databases.

Corrective: Delete the directory containing the sample code if it is not required. Restrict access to the sample code directory.