WEB_MISC /etc/passwd

 

Code: p1271

Severity: Warning

 

Description:

Impact: Information Gathering.

Corrective: Webservers should not be allowed to view or execute files and binaries outside of it's designated web root or cgi-bin. This file may also be requested on a command line should the attacker gain access to the machine. Making the file read only by the superuser on the system will disallow viewing of the file by other users.