WA00545 W22 - Web server options for the OS root must be disabled.

Information

The Apache Options directive allows for specific configuration of options, including execution of CGI, following symbolic links, server side includes, and content negotiation. The Options directive for the root OS level is used to create a default minimal options policy that allows only the minimal options at the root directory level. Then for specific web sites or portions of the web site, options may be enabled as needed and appropriate. No options should be enabled and the value for the Options Directive should be None.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Ensure the Directory directive has the following after it:

Options None

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_WIN_V1R13_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, Rule-ID|SV-33182r1_rule, STIG-ID|WA00545_W22, Vuln-ID|V-26324

Plugin: Windows

Control ID: 9fe0c3b6f02141c64ea85ccf0539b88e961816a75595e53ef49862dc64b426c6