Security Test: AWStats Exposure¶

Description¶

Default Severity: high

When configuration files for AWStats are mistakenly made public, attackers can access sensitive setup details, logs, or even credentials hidden within. This risk usually comes from misconfigured file permissions or poorly secured web server settings. If left unchecked, it could lead to unauthorized data access or give hackers clues to further compromise your systems. Developers often overlook securing these files, assuming the analytics tool is safe by default, so it’s essential to verify file access rights and server configurations to prevent unwanted exposure.

Configuration¶

Identifier: information_disclosure/awstats_exposure

Examples¶

All configuration available:

checks:
  information_disclosure/awstats_exposure:
    skip: false # default

Compliance and Standards¶