Home / Vulnerability Database / Config files : Unsafe HTTP access control
Config files
Config files : Unsafe HTTP access control
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
CWE/SANS Top 25 2021
Overview
Protection enabled not for all HTTP methods.
In security-constraint, do not list any http-method. Any non-listed method will be unprotected, so attackers may use an uncommon method (HEAD, TRACE, DELETE…) to access the protected resources.
LOW
DerScanner Severity Score
Do you want to fix Config files : Unsafe HTTP access control in your application?
See also
Config files
Config files : Text4Shell Vulnerability
Config files
Config files : Incorrect directory deletion
Config files