Detections
Analytics
Resin Status Page Information Disclosure
medium Nessus Plugin ID 11930
Language:
Synopsis
The remote web server is affected by an information disclosure issue.Description
Requesting the URI '/caucho-status' or '/server-status' gives information about the currently running Resin java servlet container.Solution
If you don't use this feature, set the content of the '<caucho-status>' element to 'false' in the resin.conf file.Plugin Details
Severity: Medium
ID: 11930
File Name: resin_server_status.nasl
Version: 1.16
Type: remote
Family: Web Servers
Published: 11/22/2003
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:caucho:resin
Required KB Items: www/apache