CAS-003 · Question #548
An organization is attempting to harden its web servers and reduce the information that might be disclosed by potential attackers. A security analyst is reviewing vulnerability scan results from a…
The correct answer is A. Response: C:\Docments\marysmith\malinglist.pdf. A server response that reveals a local file system path and username is a critical information disclosure finding that must be remediated to prevent attackers from mapping internal infrastructure.
Question
An organization is attempting to harden its web servers and reduce the information that might be disclosed by potential attackers. A security analyst is reviewing vulnerability scan results from a recent web server scan. Portions of the scan results are shown below:
Which of the following lines indicates information disclosure about the host that needs to be remediated?
Exhibit
Options
- AResponse: C:\Docments\marysmith\malinglist.pdf
- BFinding#5144322
- CFirst Time detected 10 nov 2015 09:00 GMT_0600
- DAccess path: http//myorg.com/mailinglist.htm
How the community answered
(26 responses)- A73% (19)
- B8% (2)
- C4% (1)
- D15% (4)
Why each option
A server response that reveals a local file system path and username is a critical information disclosure finding that must be remediated to prevent attackers from mapping internal infrastructure.
The response 'C:\Documents\marysmith\mailinglist.pdf' exposes the web server's internal directory structure and a real username, both of which an attacker can use for targeted reconnaissance, path traversal attempts, or social engineering. This verbose server response is caused by a misconfiguration that returns raw file system details to clients instead of a generic error message. Remediation requires configuring the web server to suppress detailed path information in all responses.
A finding number is an internal scanner reference identifier and contains no sensitive information about the host or its configuration.
The first detection timestamp is metadata generated by the vulnerability scanner and does not disclose any information about the host's internal structure.
The access path shows the public-facing URL used to request the resource, which is expected to be visible to users and is not itself an information disclosure vulnerability.
Concept tested: Web server information disclosure via verbose error responses
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/08-Fingerprint_Web_Application_Framework
Topics
Community Discussion
No community discussion yet for this question.