Skip to content

Access Control: Exposed PHP-FPM Port

Identifier: phpfpm_port_exposed

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

PHP-FPM FastCGI ports shouldn't be reachable from untrusted networks because direct access can bypass the web server boundary.

How we test: We identify publicly reachable FastCGI/PHP-FPM services and report them when the service port is exposed.

Configuration

Example

Example configuration:

---
security_tests:
  phpfpm_port_exposed:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.