WEB_MISC /~ftp access

 

Code: p1289

Severity: Warning

 

Description: This event is generated when an attempt is made to access the home directory of the ftp user via http.

Impact: Medium - Possible unauthorized file access due a configuration error

Corrective: Visit http://httpd.apache.org/docs for UserDir configuration options or remove UserDir module if not needed. Configure the ftp user to use a non-interactive nologin shell that does not require a home directory.