Description

Apache /stronghold-info displays information about your Apache configuration. This URL is enabled when you are using Apache Stronghold. If you are not using this feature, disable it.

Remediation

Disable this functionality if not required.

References

Apache Homepage

Related Vulnerabilities

WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)

WordPress allows editing theme/plugin files

CodeIgniter development mode enabled

WordPress Plugin Simple File Downloader Cross-Site Scripting (1.0.4)

WordPress Plugin JM Twitter Cards Information Disclosure (6.1)

Severity

Low

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Configuration Information Disclosure