documentation_complete: true

title: 'Disable CGI Support'

description: |-
    The <tt>cgi</tt> module allows HTML to interact with the CGI web programming language.
    <br /><br />
    If this functionality is unnecessary, comment out the module:
    <pre>#LoadModule cgi_module modules/mod_cgi.so</pre>

    If the web server requires the use of CGI, enable <tt>mod_cgi</tt>.

rationale: |-
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.

severity: unknown

identifiers:
    cce: 27362-3
