Possible server path disclosure (Windows)

Description

During the scan, Kayran managed to find a Possible server path disclosure (Windows) vulnerability.
Full Path Disclosure (FPD) vulnerabilities allows the attacker to get the path that leads to the webroot/file.

The risks of such types of attacks can yield several results. For example, if the webroot is getting leaked, attackers may abuse this knowledge and use it in combination with other vulnerabilities.

Information Disclosure occurs when a website unintentionally reveals sensitive information to its users.
Information disclosure can occur in various cases. For example, Sensitive information resources or messages that are unintentionally being displayed to unauthorized users. Therefore, the Possible server path disclosure takes place.

Recommendation

To prevent this vulnerability, make sure that the server displays a generic, simple message and does not reveal any sensitive information about the server.

References

https://owasp.org/www-community/attacks/Full_Path_Disclosure

< Return to all Vulnerabilities

Blue Team

We’ve talked about The Red Team before, but what about The Blue Team? How is this group different from the red one? Why would we

Read More »

Crossing Scripts – XSS

Injections. SQL Injections. Cross-site Scripting (hence the amazing title “Crossing Scripts – XSS”). There all sorts of Injection-Based attacks, if you want to read about

Read More »

Using VPN

What is a VPN? Why should someone be using VPN? Which Problems does is solve? and what is the advantages and disadvantages of it? Let’s

Read More »