Description

Apache Axis2 is installed on this application server. By accessing a specific URL (/services/listServices) it's possible to list all the available web services deployed in this server.

Remediation

If you don't want these services to be publicly available you need to restrict access to the /services/listServices URL.

References

Related Vulnerabilities