Description

Apache /stronghold-status displays information about your Apache configuration. This URL is enabled when you are using Apache Stronghold. If you are not using this feature, disable it.

Remediation

Disable this functionality if not required.

References

Apache Homepage

Related Vulnerabilities

WordPress Plugin WordPress Mobile Pack Information Disclosure (2.1.2)

Unrestricted access to Prometheus Metrics

WordPress Plugin Sliced Invoices-WordPress Invoice Multiple Vulnerabilities (3.8.2)

WordPress Plugin Stop User Enumeration User Enumeration (1.2.4)

Unprotected Kong Gateway Admin API interface

Severity

Low

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure CWE-200