Description

FrontPage Extensions are enabled on this server.

Remediation

If you are not using this functionality is recommended to run IISLockDown in order to disable FrontPage extensions.

References

IIS Lockdown Tool

Related Vulnerabilities

WordPress Plugin Doneren met Mollie Information Disclosure (2.8.4)

WordPress Plugin WP Import Export Information Disclosure (3.9.15)

Apache Spark Web UI Unauthorized Access Vulnerability

ASP.NET Deny missing from authorization rule on location

WordPress Plugin Wp-ImageZoom 'file' Parameter Information Disclosure (1.0.3)

Severity

Low

Classification

CWE-16 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure