V-206411
Web Server Security Requirements Guide
Title
The web server must display a default hosted application web page, not a directory listing, when a requested web page cannot be found.
Description
<VulnDiscussion>The goal is to completely control the web user's experience in navigating any portion of the web document root directories. Ensuring all web content directories have at least the equivalent of an index.html file is a significant factor to accomplish this end. Enumeration techniques, such as URL parameter manipulation, rely upon being able to obtain information about the web server's directory structure by locating directories without default pages. In the scenario, the web serve...
Fix Text (Documentation Requirement)
Place a default web page in every web document directory.