documentation_complete: true

prodtype: rhel7

title: 'Disable Web Server Configuration Display'

description: |-
    The <tt>info</tt> module creates a web page illustrating the configuration of the web server. This
    can create an unnecessary security leak and should be disabled.
    If its functionality is unnecessary, comment out the module:
    <pre>#LoadModule info_module modules/mod_info.so</pre>
    If there is a critical need for this module, use the <tt>Location</tt> directive to provide
    an access control list to restrict access to the information.

rationale: |-
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.

severity: unknown

identifiers:
    cce@rhel7: 80311-4
