Skip to main content
CUI

Vulnerability V-218759

Back

V-218759

CAT II

Directory Browsing on the IIS 10.0 website must be disabled.

Ships Affected
2
Total Findings
4
Open
0
Closed
4

Check Text

Follow the procedures below for each site hosted on the IIS 10.0 web server: Click the Site. Double-click the "Directory Browsing" icon. If "Directory Browsing" is not installed, this is Not Applicable. Under the "Actions" pane, verify "Directory Browsing" is "Disabled". If "Directory Browsing" is not "Disabled", this is a finding.

Fix Text

Follow the procedures below for each site hosted on the IIS 10.0 web server: Open the IIS 10.0 Manager. Click the Site. Double-click the "Directory Browsing" icon. Under the "Actions" pane, click "Disabled".

STIG Reference

STIG
Microsoft IIS 10.0 Site Security Technical Implementation Guide
Version
2
Release
15
Rule ID
SV-218759r961158_rule

All Occurrences

This vulnerability appears on 2 ship(s)

Ship Hull # Source File Status Assigned To Scan Date Actions
LAB BASELINES BASELINE SCHR-P3-DP-001_IIS10Site_Default_Web_Site_V2R14_20260305-133115.cklb
Unassigned 2026-03-12T15:38:14.459023 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IIS10Site_Default_Web_Site_V2R12_20251023-143912.ckl
Unassigned 2026-01-14T12:57:35.375369 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IIS10Site_Exchange_Back_End_V2R12_20251023-152602.ckl
Unassigned 2026-01-14T12:57:33.300070 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IIS10Site_Default_Web_Site_V2R12_20251023-152518.ckl
Unassigned 2026-01-14T12:57:33.098574 View in Context
CUI