Description
OPcache improves PHP performance by storing precompiled script bytecode in shared memory, thereby removing the need for PHP to load and parse scripts on each request.
The OPcache Status (opcache-status) package provides an one-page status page for PHP OPcode caching. This page outputs a large amount of information about the current state of PHP OPcache that could help an attacker to prepare more advanced attacks. It's recommended to restrict access to this page.
Remediation
Remove the opcache-status page from production systems or restrict access to this page.
References
Related Vulnerabilities
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Multiple Vulnerabilities (4.1.2)
WordPress Plugin VikBooking Hotel Booking Engine & PMS Multiple Vulnerabilities (1.5.3)
WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)
Joomla! Core 1.6.x Information Disclosure (1.6.0 - 1.6.3)
WordPress Plugin User Meta Manager Information Disclosure (3.4.7)