Skip to content

H3-2022-0049

IIS web.config File Exposure

Category SECURITY_MISCONFIGURATION
Base Score 3.5

Description

The IIS server configuration file web.config is exposed.

Impact

Having server configuration exposed supplies a lot of sensitive information which may help an attacker to prepare for an attack of the applications.

References