WEB_MISC .htgroup access

 

Code: p1523

Severity: Warning

 

Description: Attempted .htgroup access via web

Impact: Attempt to gain information on group access permissions on a webserver

Corrective: Webservers should not be allowed to view or execute files and binaries outside of it's designated web root or cgi-bin. Disallowing viewing of this file via a URI is suggested. For Apache webservers add the following to httpd.conf and restart the server. Order allow,deny Deny from all