Apache server-status enabled

Description

Apache /server-status displays information about your Apache status. If you are not using this feature, disable it.

ShareShare on FacebookTweet about this on TwitterShare on Google+

Impact
Possible sensitive information disclosure.

Recommendation
Disable this functionality if not required. Comment out the <Location /server-status> section from httpd.conf.

References
Apache Homepage