HTTP: Web.config File Access

This signature detect access to the web.config file. Web.config is the main settings and configuration file for an ASP.NET web application. The file is an XML document that defines configuration information regarding the web application. The web.config file contains information that controls module loading, security configurations, session state configurations, and application language and compilation settings. Web.config files can also contain application specific items such as database connection strings.

References

URL: http://msdn.microsoft.com/en-us/library/aa719558.aspx

Short Name

HTTP:INFO-LEAK:ASP-WEB-CONFIG

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Web.config File Access

References

Found a potential security threat?