WA00560 A22 - The URL-path name must be set to the file path name or the directory path name.

Information

The ScriptAlias directive controls which directories the Apache server 'sees' as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.

Solution

Edit the httpd.conf file and set the ScriptAlias URL-path and file-path or directory-path entries.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_UNIX_V1R11_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, Rule-ID|SV-33229r1_rule, STIG-ID|WA00560_A22, Vuln-ID|V-26327

Plugin: Unix

Control ID: 06a1e9dc568752951526c1c35f2b7179988de219ea931ced081276ea1de6eaf0