 |
|
WEB_IIS site server config access
|
| |
Code:
p1168
Severity: Warning
Description:
This event is generated when an attempt is made to access the Microsoft Site Server site configuration file.
Impact:
Intelligence gathering. This attack may permit the viewing of the site configuration file, which may contain sensitive information such as the username and password used by the Ad Server to access SQL databases.
Corrective:
Delete the directory containing the sample code if it is not required.
Restrict access to the sample code directory.
|